Re: Unknown certificate

Sam:

There is definitely something strange going on. I've determined these
Unknown certificate logs are emitted every time I click on a different
folder in my Thunderbird instance inside my home network. They started
appearing 2024-11-24 00:00:45, which leads me to believe there is an
expired certificate involved, but I am not finding any evidence for that on
Thunderbird's side. I deleted every single certificate related item I could
find in the configs (ancient overrides from self signed root CAs etc etc),
S/MIME things, etc.

The errors don't seem to be causing actual problems with the operation of
Thunderbird. I guess it's retrying the connection and succeeding, somehow
... Hmm. Could this be some issue where courier is attempting to
renegotiate TLS on an already established TLS?

For now I'm going to assume there is something going on with whatever ssl
lib the courier-imapd I've installed is linked to because back on Oct 13 I
posted to this list subject "courier-imap and courier-webadmin in ubuntu
24.04".

Courier imapd and webadmin packages are missing from Ubuntu 24.04 and I
installed the packages from the 24.04 .deb's they built just prior to
delisting them from the distro. They were (erroneously) removed due to some
issue with libpcre3. I was unsuccessful reaching the maintainer, so I may
have to build courier from source to see if it'll resolve the issues; and
I'm not sure if ubuntu's directory scheme is different than courier's
defaults and whether building from source will slot in with systemd startup
files expected by the rest of the courier packages that were not dumped by
the maintainer.

A.

On Mon, Nov 25, 2024 at 5:09 AM Sam Varshavchik <[email protected]>
wrote:

> Andrew Athan writes:
>
> > « HTML content follows
> >
> > »Can you tell me what the likely source of log lines like these is:
> >
> >
> > 2024-11-24T19:51:21.836587-08:00 xx imapd-ssl: ip=[::ffff:1.2.3.4],
> Unknown
> > certificate
> >
> >
> > all certificates references in the configs are valid AFAIK.
>
> Googling suggests that this is related to SSL certificate validation and
> the
> client's certificate is rejected by the server, for example:
>
> https://stackoverflow.com/questions/65838917
>
> _______________________________________________
> courier-users mailing list
> [email protected]
> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
>

_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users