STARTTLS negotiation failed

[Steve Huston]

This is more of a Pine problem than Cyrus, but I'm hoping someone here might
know what I can do...

I'm setting up a test server to check out the latest release of Cyrus IMAPD,
as well as a few other things (sendmail+TLS+SMTP AUTH, squirrelmail,
spamassassin & amavis).  I've got Cyrus installed and running, and can read
mail fine with it (though there isn't any to read right now).  My problem is
connecting with Pine.

Now, our current Cyrus server has a self-signed cert which Pine doesn't like
unless you add /novalidate-cert to the hostname of the server.  But this time,
that doesn't even help as it just says "There was an SSL/TLS failure for the
server" "The reason for the failure was: SSL Negotiation failed"  Cyrus also
reports the same thing in the logs.  I understand the point of
'/novalidate-cert', meaning don't try to check the signing authority on the
cert, and I could overlook things if that was the only error.  But the whole
"negotiation failed" part has me worried, as I can't buy a cert for a test
server, and can't deploy the new Cyrus if Pine won't work with it (it's the
only departmentally-supported mail client, I've guaranteed it will work even
if the IMAP-client-du-jour doesn't).  Cranking up the debugging in Pine
(thanks RedHat for making me recompile it to add what should be there by
default) only gets me that Pine issues the STARTTLS command, and then right
after that complains that negotiation failed, no reason why.

Anyone have an idea?  I suppose I could dig up the CA cert I created before to
sign the current server's cert, and sign the test server's cert with it, and
even install that in /usr/share/ssl/ so it will be 'recognized' as authentic.
But it doesn't seem to be complaining about validity, just that it can't
negotiate.  I can, however, using Mozilla or Apple's "Mail" program, so I
don't think there's anything wrong with Cyrus (and Pine 4.44 works with the
current server just fine).

-- 
Steve Huston - Unix Systems Administrator, Dept. of Astrophysical Sciences
 Princeton University  |     ICBM Address: 40.346525   -74.651285
   126 Peyton Hall     |"On my ship, the Rocinante, wheeling through
 Princeton, NJ   08544 | the galaxies; headed for the heart of Cygnus,
   (609) 258-7375      | headlong into mystery."  -Rush, 'Cygnus X-1'