More success with TLS; problem with STARTTLS

JOYDEEP j.bakshi at unlimitedmail.org
Mon Apr 2 03:57:18 EDT 2007


arnaud at opensquad.com wrote:
> Hello Joydeep
>
>
> Selon JOYDEEP <j.bakshi at unlimitedmail.org>:
>
>   
>> Dear all,
>>
>> here is some more  success story.
>>
>> 1>     using LOGIN
>>
>>  imtest -a aftab  -m LOGIN  linux.kolkatainfoservices.in -p 993 -s
>>
>>
>> --------------------------------------------------------------
>> verify error:num=19:self signed certificate in certificate chain
>> verify error:num=24:invalid CA certificate
>> verify error:num=26:unsupported certificate purpose
>> TLS connection established: TLSv1 with cipher AES256-SHA (256/256 bits<snip>
>>     
</snip>


</snip>
>
> You should not issue a STARTTLS over a SSL session. Your connection is already
> crypted.
> BTW the server does not offers STARTTLS in its capabilities.
>
> So ... your config is OK (according to me) ! ;-)
>
>
>
> Arnaud
>   
OK, Arnaud now it is clear to me SSL includes STARTTLS.
thanks a lot.



More information about the Info-cyrus mailing list