<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Separate subject, but couldn't help but notice, SSL3 is being
used? <br>
Wasn't SSL3 retired because of POODLE exploits? Can someone more
knowledgeable confirm?<br>
</p>
<div class="moz-cite-prefix">On 9/7/21 11:05, Steve Dondley wrote:<br>
</div>
<blockquote type="cite"
cite="mid:171f997da090a5b57c2a9581a5c243f7@dondley.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p id="reply-intro">On 2021-09-07 01:25 PM, Amol Kulkarni wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left:
#1010ff 2px solid; margin: 0">
<div id="replybody1">
<div dir="ltr">Hello,<br>
<div> </div>
<div>After I replaced my certificate with a new one
yesterday, I'm seeing some ssl related errors. There are
successful pop/imap logins using SSL also. So I think the
certificate in itself is fine. No user has complained as
yet, so I don't know for sure. However the count of errors
has surely increased after installing the new certificate.</div>
<div>There are 2 errors seen :</div>
<div>dovecot: imap-login: Disconnected (no auth attempts in
1 secs): user=<>, rip=, lip<br>
=, TLS handshaking: SSL_accept() failed:
error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert
certificate unknown: SSL alert number 46,
session=<9m0AnVnL<br>
2pHf4hso><br>
<br>
<br>
dovecot: imap-login: Disconnected (no auth attempts in 0
secs): user=<>, rip=, lip<br>
=, TLS: SSL_read() failed: error:14094412:SSL
routines:SSL3_READ_BYTES:sslv3 alert bad certificate: SSL
alert number 42, session=<ww/b6VfLmeR7yTog></div>
<div> </div>
<div>Kindly help with some pointers. </div>
<div> </div>
<div>Thanks and Regards,</div>
<div>Amol</div>
</div>
</div>
</blockquote>
<p>I assume you tried restarting dovecot, but just in case... </p>
</blockquote>
</body>
</html>