<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<p>That is good to know. I was working on the wrong assumption,
attempting to create a client certificate on the
Windows/Thunderbird side.</p>
<p>I am using the SSL Certificate that comes with the distribution,
so the conclusion is Thunderbird does not trust it.</p>
<p>I have this in my notes from ages ago, for generating my own
self-signed certificate:</p>
<p>% openssl req -x509 -newkey rsa:4096 -sha256 -keyout openssl.key
-out openssl.crt -days 600 -config san.cnf</p>
<p>See attached the 2 errors that I am getting, one is from the
distribution cert.<br>
</p>
<p>Can a kind soul tell me the current way to do this in Linux?</p>
<p>Perhaps I should use a free service? Which?<br>
</p>
<p>TIA<br>
</p>
<p>Raymond<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 11/10/2020 2:20 PM, Aki Tuomi wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1925026771.3035.1605039619909@appsuite-dev-gw2.open-xchange.com">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 10/11/2020 19:17 Raymond Herrera <a class="moz-txt-link-rfc2396E" href="mailto:raymond@forcewise.com"><raymond@forcewise.com></a> wrote:
This is a followup to my thread "Recommended Protocols?".
The error message is as follows:
dovecot: imap-login: Disconnected: TLS: SSL_read() failed: SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42
I have selected both SSL/TLS and STARTTLS on the Thunderbird side, with identical results.
The first question that I have is this. Is there any way to know whether that error messages comes from an attempt to read:
(a) The server SSL certificate?
(b) The client SSL certificate?
Please find attached 2 log files. I am essentially using the distribution files as they come from the box.
TIA
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">While bit confusing, this actually means the client did not trust the server certificate. Usually because you forgot the chain certs from the cert file.
Aki
</pre>
</blockquote>
</body>
</html>