Re: Problems with cyrus 2.5.10 after system update

So, running

  openssl s_client -connect mail.myserver.org:143 -starttls imap

it appears that it's still trying to use SSLv3 and the newest version of 
openssl won't allow this?

===================================
[pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143 
-starttls imap
CONNECTED(00000003)
140245839085440:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert 
handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 726 bytes and written 202 bytes
Verification: OK
===================================

before I start googling, can someone tell me how to disable SSLv3 in 
imapd.conf?

On 05/17/2017 08:53 AM, Patrick Goetz wrote:
> I had to update my mail server for unrelated reasons, after which I 
> couldn't get cyrus-master to start.  It turned out to be related to 
> ctl_cyrusdb not running because the program was compiled against 
> libssl.so.1.0 while this library had been upgraded to libssl.so.1.1
> 
> So, I recompiled cyrus  (I'm running Arch linux and am using the 
> cyrus-imapd AUR package) but now it doesn't seem to be able to use SSL 
> at all.  When I start my MUA I get a message
> 
> "The IMAP server ... does not support the selected authentication 
> method:  which is STARTTLS over port 143.
> 
> Any ideas on what I can do short of downgrading libssl.so to libssl.so.1.0?
> 
> ----
> Cyrus Home Page: 
> http://secure-web.cisco.com/14J2MQPcWP1V1X8PI7D2pUqnGEr83roQya4gSH694w_JGDrGdpxHbSGLYx2PnLX7w187T5IaGviognr46OHjOG5F3-d_jhv8cpuxwj7z4pjDLeqGTRyK_CudP3ZiE1suhA-NBZD0wBVvCzte5M1PRziU_2qtB_fLcoTufxwcX6HEUPuIHwCv0OK3mH6S9POAy65hrJwzNzDXth7sSGzPEpUNAu6j5uDEZ3IIAu7wamKWZO9ju6JYqHp1I8N1-DN88eozxuwOztR_QM8_6zIGTWnPY1qbRHulv8Qv-EEmsJApUgp6siVoBpukK-54k7T9o/http%3A%2F%2Fwww.cyrusimap.org%2F 
> 
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
> 
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus