From: (no name) (no email)
Date: Mon Apr 02 2007 - 03:53:57 EDT
Hello Joydeep
Selon JOYDEEP <>:
> Dear all,
>
> here is some more success story.
>
> 1> using LOGIN
>
> imtest -a aftab -m LOGIN linux.kolkatainfoservices.in -p 993 -s
>
>
> --------------------------------------------------------------
> verify error:num=19:self signed certificate in certificate chain
> verify error:num=24:invalid CA certificate
> verify error:num=26:unsupported certificate purpose
> TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
> S: * OK linux.kolkatainfoservices.in Cyrus IMAP4 v2.2.12 server ready
> C: C01 CAPABILITY
> S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
> NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
> BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE
> AUTH=LOGIN AUTH=PLAIN SASL-IR X-NETSCAPE
> S: C01 OK Completed
> Please enter your password:
>
> C: L01 LOGIN aftab {5}
> S: + go ahead
> C: <omitted>
> S: L01 OK User logged in
> Authenticated.
> Security strength factor: 256
>
----------------------------------------------------------------------------------------
>
> 2> Using PLAIN
>
> imtest -a aftab -m PLAIN linux.kolkatainfoservices.in -p 993 -s
>
> ------------------------------------------
> verify error:num=19:self signed certificate in certificate chain
> verify error:num=24:invalid CA certificate
> verify error:num=26:unsupported certificate purpose
> TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
> S: * OK linux.kolkatainfoservices.in Cyrus IMAP4 v2.2.12 server ready
> C: C01 CAPABILITY
> S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
> NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
> BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE
> AUTH=LOGIN AUTH=PLAIN SASL-IR X-NETSCAPE
> S: C01 OK Completed
> Please enter your password:
>
> C: A01 AUTHENTICATE PLAIN AGFmdGFiAGFmdGFi
> 'S: A01 OK Success (tls protection)
> Authenticated.
> Security strength factor: 256
> ---------------------------------------------------------------------
>
> 3> but the problem is using STARTTLS
>
> ---------------------------------------
> verify error:num=19:self signed certificate in certificate chain
> verify error:num=24:invalid CA certificate
> verify error:num=26:unsupported certificate purpose
> TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits)
> S: * OK linux.kolkatainfoservices.in Cyrus IMAP4 v2.2.12 server ready
> C: C01 CAPABILITY
> S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
> NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
> BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE
> AUTH=LOGIN AUTH=PLAIN SASL-IR X-NETSCAPE
> S: C01 OK Completed
> failure: STARTTLS not supported by the server!
> ------------------------------------------------------------------
>
>
You should not issue a STARTTLS over a SSL session. Your connection is already
crypted.
BTW the server does not offers STARTTLS in its capabilities.
So ... your config is OK (according to me) ! ;-)
Arnaud
>
>
>
> ----
> Cyrus Home Page: http://cyrusimap.web.cmu.edu/
> Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
> List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
>
---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|