<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>In setting up my new mail server, I am getting the following in
the logs:</p>
<p>Oct 11 07:10:59 kumo dovecot[5704]: imap-login: Disconnected (no
auth attempts in 0 secs): user=<>, rip=24.53.79.10,
lip=172.26.12.90, <b>TLS handshaking: SSL_accept() syscall
failed: Success</b>, session=<B9OokqCUD+UYNU8K><br>
</p>
<p>I have tried various ssl_protocols entries, but for now have
defaulted back to ssl_protocols = !SSLv3 (the "out of the box"
setting).</p>
<p>The certificate (ssl_cert =
</etc/ssl/certs/certificate_and_key.crt) is valid and the same
one used by postfix. However, I belive the error appeared only
after removing the self signed certificate and installing the one
I purchased.<br>
</p>
<p>Warning: though I was a sysadmin a long long time, it has been a
while! I have not run a mail server in 15 years, but am moving my
mail back "in-house" as I approach retirement! I searched for a
forum where I could post this issue, but only found this list.<br>
</p>
<p><br>
</p>
<p><br>
</p>
<p># 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf</p>
# Pigeonhole version 0.4.21 (92477967)<br>
# OS: Linux 4.15.0-1051-aws x86_64 Ubuntu 18.04.1 LTS <br>
auth_mechanisms = plain login<br>
mail_location = maildir:~/Maildir<br>
mail_privileged_group = mail<br>
managesieve_notify_capability = mailto<br>
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date index ihave duplicate mime foreverypart
extracttext<br>
namespace inbox {<br>
inbox = yes<br>
location = <br>
mailbox Drafts {<br>
special_use = \Drafts<br>
}<br>
mailbox Junk {<br>
special_use = \Junk<br>
}<br>
mailbox Sent {<br>
special_use = \Sent<br>
}<br>
mailbox "Sent Messages" {<br>
special_use = \Sent<br>
}<br>
mailbox Trash {<br>
special_use = \Trash<br>
}<br>
prefix = <br>
}<br>
passdb {<br>
driver = pam<br>
}<br>
plugin {<br>
sieve = ~/.dovecot.sieve<br>
sieve_dir = ~/sieve<br>
}<br>
protocols = " imap sieve pop3"<br>
service auth {<br>
unix_listener /var/spool/postfix/private/dovecot-auth {<br>
group = postfix<br>
mode = 0660<br>
user = postfix<br>
}<br>
}<br>
ssl_cert = </etc/ssl/certs/certificate_and_key.crt<br>
ssl_cipher_list = ALL:!ADH:!LOW:!EXP:!aNULL:+HIGH:+MEDIUM<br>
ssl_client_ca_dir = /etc/ssl/certs<br>
ssl_key = # hidden, use -P to show it<br>
userdb {<br>
driver = passwd<br>
}<br>
protocol lda {<br>
deliver_log_format = msgid=%m: %$<br>
mail_plugins = sieve<br>
postmaster_address = postmaster<br>
quota_full_tempfail = yes<br>
rejection_reason = Your message to <%t> was automatically
rejected:%n%r<br>
}<br>
protocol imap {<br>
imap_client_workarounds = delay-newmail<br>
mail_max_userip_connections = 10<br>
}<br>
protocol pop3 {<br>
mail_max_userip_connections = 10<br>
pop3_client_workarounds = outlook-no-nuls oe-ns-eoh<br>
}<br>
</body>
</html>