Hello,<br><br>auto-answering.<br>During the upgrade process the /dev/* permission were broken. It includes /dev/urandom which I think (can someone confirm) is used by SSL.<br>Put permission back and all is working fine.<br>
<br>Ethariel<br><br><div class="gmail_quote">2010/9/5 Ethariel <span dir="ltr"><<a href="mailto:ethariel@gmail.com">ethariel@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Hello,<div><br></div><div>I need to upgrade a server to the last Mandriva, so cyrus-imapd as upgraded in the process.</div><div>imap, pop and sieve are working fine as before.</div><div><br></div><div>pop3s and imaps are no more working.</div>
<div><br></div><div>I try to re-generate some new certificate, same error.</div><div><br></div><div>From the client :</div><div><br></div><div><div>openssl s_client -connect localhost:993</div><div>CONNECTED(00000003)</div>
<div>3082552968:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:683:</div><div>---</div><div>no peer certificate available</div><div>---</div><div>No client certificate CA names sent</div><div>
---</div><div>SSL handshake has read 7 bytes and written 208 bytes</div><div>---</div><div>New, (NONE), Cipher is (NONE)</div><div>Secure Renegotiation IS NOT supported</div><div>Compression: NONE</div><div>Expansion: NONE</div>
<div>---</div></div><div><br></div><div><br></div><div>From the server side :</div><div><br></div><div><div>Sep 5 20:27:45 srv001 imaps[13759]: accepted connection</div><div>Sep 5 20:27:45 srv001 cyrus-master[13868]: about to exec /usr/lib/cyrus-imapd/imapd</div>
<div>Sep 5 20:27:45 srv001 imaps[13868]: SQL backend defaulting to engine 'pgsql'</div><div>Sep 5 20:27:45 srv001 imaps[13868]: executed</div><div>Sep 5 20:27:45 srv001 imaps[13759]: imapd:Loading hard-coded DH parameters</div>
<div>Sep 5 20:27:45 srv001 imaps[13759]: ssl session id callback failed in SSL_accept() -> fail</div><div>Sep 5 20:27:45 srv001 imaps[13759]: imaps TLS negotiation failed: srv001.domain.tld [127.0.0.1]</div><div>Sep 5 20:27:45 srv001 cyrus-master[13566]: process 13759 exited, status 75</div>
<div>Sep 5 20:27:45 srv001 cyrus-master[13566]: service imaps pid 13759 in BUSY state: terminated abnormally</div></div><div><br></div><div>(domain.tld is just a replace in this log, the name is configurated with a real one).</div>
<div><br></div><div>Any idea ?</div><div><br></div><div>I found some message on this lost or google about some problem with libsasl2, do you think it's related ?</div><div><br></div><div><div>libsasl2-2.1.23-8mdv2010.1.i586</div>
<div>cyrus-imapd-2.3.15-7mdv2010.1.i586</div></div><div><br></div><div>Thks for your help</div><div><br></div><div>BRgds,</div><div>Ethariel</div>
</blockquote></div><br>