Re: Problems with cyrus 2.5.10 after system update

On 05/17/2017 11:40 AM, Patrick Goetz wrote:
> So, running
> 
>   openssl s_client -connect mail.myserver.org:143 -starttls imap


Same error with -tls1_2 ?

openssl s_client -connect mail.myserver.org:143 -tls1_2 -starttls imap



> 
> it appears that it's still trying to use SSLv3 and the newest version of 
> openssl won't allow this?
> 
> ===================================
> [pgoetz@frog ~]$ openssl s_client -connect mail.myserver.org:143 
> -starttls imap
> CONNECTED(00000003)
> 140245839085440:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert 
> handshake failure:ssl/record/rec_layer_s3.c:1385:SSL alert number 40
> ---
> no peer certificate available
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 726 bytes and written 202 bytes
> Verification: OK
> ===================================
> 
> before I start googling, can someone tell me how to disable SSLv3 in 
> imapd.conf?
> 
> On 05/17/2017 08:53 AM, Patrick Goetz wrote:
>> I had to update my mail server for unrelated reasons, after which I 
>> couldn't get cyrus-master to start.  It turned out to be related to 
>> ctl_cyrusdb not running because the program was compiled against 
>> libssl.so.1.0 while this library had been upgraded to libssl.so.1.1
>>
>> So, I recompiled cyrus  (I'm running Arch linux and am using the 
>> cyrus-imapd AUR package) but now it doesn't seem to be able to use SSL 
>> at all.  When I start my MUA I get a message
>>
>> "The IMAP server ... does not support the selected authentication 
>> method:  which is STARTTLS over port 143.
>>
>> Any ideas on what I can do short of downgrading libssl.so to 
>> libssl.so.1.0?
>>
>> ----
>> Cyrus Home Page: 
>> http://secure-web.cisco.com/14J2MQPcWP1V1X8PI7D2pUqnGEr83roQya4gSH694w_JGDrGdpxHbSGLYx2PnLX7w187T5IaGviognr46OHjOG5F3-d_jhv8cpuxwj7z4pjDLeqGTRyK_CudP3ZiE1suhA-NBZD0wBVvCzte5M1PRziU_2qtB_fLcoTufxwcX6HEUPuIHwCv0OK3mH6S9POAy65hrJwzNzDXth7sSGzPEpUNAu6j5uDEZ3IIAu7wamKWZO9ju6JYqHp1I8N1-DN88eozxuwOztR_QM8_6zIGTWnPY1qbRHulv8Qv-EEmsJApUgp6siVoBpukK-54k7T9o/http%3A%2F%2Fwww.cyrusimap.org%2F 
>>
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
>>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

begin:vcard
fn:Patrick Boutilier
n:Boutilier;Patrick
org:;Nova Scotia Department of Education
adr:;;2021 Brunswick Street;Halifax;NS;B3K 2Y5;Canada
email;internet:[email protected]
title:WAN Communications Specialist
tel;work:902-424-6800
tel;fax:902-424-0874
version:2.1
end:vcard