t/s expired cert error

[Erwan David]

Le 02/03/2021 à 13:29, Voytek Eymont a écrit :
> since a couple of days one of users reported getting expired certificate
> error in TB, looking at the log, I can see like:
>
> Mar 02 21:46:24 pop3-login: Info: Disconnected (no auth attempts in 0
> secs): user=<>, rip=111.222.333.444, lip=103.106.168.105, TLS: SSL_read
> failed: error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert
> certificate expired: SSL alert number 45, session=<...>


Here it is the certificate presented on the pop3 port (either port 110
with a STLS command or port 995)


> but, looking at server with
> https://ssl-tools.net/mailservers/emu.sbt.net.au it says 'valid' as does
> certbot tool


Here it seems te site tests the smtp server (on port 25), which is not
handled by dovecot. You probably have different certificates on both.