Re: Cyrus21 does not work corectly with SSL

[Nicolas Ledez <debianfr_ml02@les-ledez.com>]

Le Tue, Feb 15, 2005 at 06:47:53PM +0100, Christian Storch a écrit :
> I've tried your scripts for creating root and server certs.
> Testing with s_client on two different servers I got no errors
> but nearly the same output you've posted!
I try to find more information for my certificate.
With openssl verify -CApath /etc/ssl/certs/ -issuer_checks imap.winch.my.crt
I have "error 29 at 0 depth lookup:subject issuer mismatch" errors.
I think it's normaly.
What command can I use to test certificate ?

> woody:
> ii  cyrus21-common 2.1.15-0woody.1.0        Cyrus mail system (common files)
> ii  cyrus21-imapd  2.1.15-0woody.1.0        Cyrus mail system (IMAP support)
> ii  libssl0.9.7    0.9.7d-0.backports.org.1 SSL shared libraries
> 
> sid:
> ii  cyrus21-common 2.1.17-3       Cyrus mail system (common files)
> ii  cyrus21-imapd  2.1.17-3       Cyrus mail system (IMAP support)
> ii  libssl0.9.7    0.9.7c-5       SSL shared libraries
> 
> What versions are you using? - It's the only idea I have at the moment.
largo:~# dpkg -l cyrus\*|grep '^ii'
ii  cyrus21-admin  2.1.17-3       Cyrus mail system (administration tool)
ii  cyrus21-client 2.1.17-3       Cyrus mail system (test clients)
ii  cyrus21-common 2.1.17-3       Cyrus mail system (common files)
ii  cyrus21-doc    2.1.17-3       Cyrus mail system (documentation files)
ii  cyrus21-imapd  2.1.17-3       Cyrus mail system (IMAP support)
ii  cyrus21-pop3d  2.1.17-3       Cyrus mail system (POP3 support)

largo:~# dpkg -l libssl\*|grep '^ii'
ii  libssl0.9.6    0.9.6m-1       SSL shared libraries (old version)
ii  libssl0.9.7    0.9.7e-2       SSL shared libraries
ii  libssl09       0.9.4-6.woody. SSL shared libraries (old version)

I tryed with tls_ca_file, tls_ca_path. Nothing...

Thanks.
 
-- 
Nicolas Ledez