<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<p>After some experimenting with:<br>
<br>
(a) The Thunderbird client</p>
<p>(b) The Linux command as client:</p>
<p>% openssl s_client -connect dovecot-server:imaps</p>
<p>I have arrived to a preliminary conclusion. The error that I am
getting is this:<br>
<br>
dovecot: imap-login: Disconnected: TLS: SSL_read() failed: SSL
routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert
number 42<br>
<br>
It seems that the server certificate from the box is fine. I am
guessing that the problem is that Dovecot asks for an SSL
certificate that the Thunderbird client is not prepared to
produce. I don't believe Thunderbird provides such capability
(??).<br>
</p>
<p>If that is the case, how do I configure Dovecot to not ask for a
client certificate?<br>
</p>
<p>Thanks,</p>
<p>Raymond<br>
</p>
<p>ps: If I am correct, the error message would be more informative
as follows: "ssl3_read_bytes:sslv3 alert bad <u><b>client</b></u>
certificate".<br>
</p>
<div class="moz-cite-prefix">On 11/9/2020 11:42 PM, Raymond Herrera
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5d9d63b5-3e13-1b3d-8c07-cadf9ba5383c@forcewise.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<p>The E-mail client is Thunderbird on Windows.<br>
</p>
<p>I am preparing a new server, with Dovecot 2.2.36 and would like
to know the currently recommended protocols. Should I stick to
what I have? I would prefer to start with the easiest
configuration possible, which I will revise later.</p>
<p>This is the command that I have been using to verify the
server's functionality:<br>
<br>
<br>
</p>
<p>TIA</p>
<p><br>
</p>
</blockquote>
</body>
</html>