<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I found out that the concatenation is simply text based here:</p>
<p><a class="moz-txt-link-freetext"
href="https://whatsmychaincert.com">https://whatsmychaincert.com</a></p>
<p>And am making progress. This is the latest error message:<br>
<br>
"dovecot: imap-login: TLS: SSL_read() failed: error:SSL
routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number
48"<br>
</p>
<p>It seems that I need a cert with a better reputation?</p>
<p>I should follow Arjen's advice:<br>
<br>
> In most cases, Letsencrypt will work just fine.</p>
<p>Either that, or fork a few bucks for a commercial SSL
Certificate.</p>
<p>Raymond</p>
<div class="moz-cite-prefix">On 11/10/2020 4:12 PM, Raymond Herrera
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:3f8e3168-ce92-b9e9-2f39-8869ae738e1f@forcewise.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>This is what I did. I obtained a certificate from this site:</p>
<p><a class="moz-txt-link-freetext"
href="https://www.sslforfree.com" moz-do-not-send="true">https://www.sslforfree.com</a></p>
<p>They provided 3 files:<br>
certificate.crt<br>
private.key</p>
<p>which make perfect sense as replacement for the 2 files
provided by the distribution. I am guessing that I need somehow
to append the 3rd file (ca_bundle.crt) to the first one? In
order to raise its credibility?<br>
</p>
<p>TIA<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 11/10/2020 2:20 PM, Aki Tuomi
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1925026771.3035.1605039619909@appsuite-dev-gw2.open-xchange.com">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 10/11/2020 19:17 Raymond Herrera <a class="moz-txt-link-rfc2396E" href="mailto:raymond@forcewise.com" moz-do-not-send="true"><raymond@forcewise.com></a> wrote:
This is a followup to my thread "Recommended Protocols?".
The error message is as follows:
dovecot: imap-login: Disconnected: TLS: SSL_read() failed: SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42
I have selected both SSL/TLS and STARTTLS on the Thunderbird side, with identical results.
The first question that I have is this. Is there any way to know whether that error messages comes from an attempt to read:
(a) The server SSL certificate?
(b) The client SSL certificate?
Please find attached 2 log files. I am essentially using the distribution files as they come from the box.
TIA
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">While bit confusing, this actually means the client did not trust the server certificate. Usually because you forgot the chain certs from the cert file.
Aki
</pre>
</blockquote>
</blockquote>
</body>
</html>