Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SSL verification error with Dovecot 2.3.2.1 [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
XelKarin
n00b
n00b


Joined: 29 Dec 2003
Posts: 41

PostPosted: Tue Sep 11, 2018 8:52 pm    Post subject: SSL verification error with Dovecot 2.3.2.1 [SOLVED] Reply with quote

I'm attempting to upgrade my Dovecot installation to 2.3.2.1. My SSL certificate authority provides a bundle containing their CA, plus intermediate CAs, which I configure using the 'ssl_ca' option. The comments in the configuration file say to only set this when you're requiring client certificates, which I'm not, but fetchmail complains with a "Server certificate verification error, Broken certificate chain" error if that setting is not set. This works fine with Dovecot 2.2.34.

After upgrading to 2.3.2.1, fetchmail throws that error whether 'ssl_ca' is set or not. Dovecot 2.3.2.1 reports the error "SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48" in the logs when attempting the TLS handshake. The permissions on the CA bundle haven't changed and should still be readable by Dovecot. Anyone have any ideas? I've been keeping =net-mail/dovecot-2.3.2.1 masked for the time being.


Last edited by XelKarin on Sun Sep 16, 2018 3:04 am; edited 1 time in total
Back to top
View user's profile Send private message
XelKarin
n00b
n00b


Joined: 29 Dec 2003
Posts: 41

PostPosted: Sun Sep 16, 2018 3:03 am    Post subject: Reply with quote

The answer was to concatenate the CA bundle onto the end of my SSL certificate and leave the ssl_ca option undefined.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum