sync_server and TLS

[Marcus Schopen]

Am Mittwoch, den 19.02.2014, 01:16 +0100 schrieb Marcus Schopen:
> Hi,
> 
> how do I figure out if master and replica are talking via TLS? Certs are
> installed on both servers. Telnet on the replica shows:
> 
> ------------
> ~# telnet replica 2005
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> * SASL DIGEST-MD5 CRAM-MD5 NTLM LOGIN PLAIN
> * STARTTLS
> * COMPRESS DEFLATE
> * OK tripp Cyrus sync server v2.4.12-Debian-2.4.12-2
> ------------
> 
> When starting the master, login and replication is working, but it seems
> not working on TLS:
> 
> Feb 19 01:11:24 replica cyrus/syncserver[22175]: accepted connection
> Feb 19 01:11:24 replica cyrus/syncserver[22175]: cmdloop(): startup
> Feb 19 01:11:24 replica cyrus/syncserver[22175]: login: server [xxx]
> syncuser DIGEST-MD5 User logged in

Certificates seems to be fine. A synctest from the master to the replica
(= server) looks like this:

synctest -a syncadmin -u syncamdin -t '' server

-----------
Feb 19 02:23:57 tripp cyrus/master[22549]: about to
exec /usr/lib/cyrus/bin/sync_server
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: executed
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: accepted connection
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: cmdloop(): startup
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: imapd:Loading hard-coded
DH parameters
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: SSL_accept() incomplete
-> wait
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: SSL_accept() succeeded ->
done
Feb 19 02:23:57 tripp cyrus/syncserver[22549]: starttls: TLSv1 with
cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication
Feb 19 02:23:59 tripp cyrus/syncserver[22549]: login: server [xxx]
syncamdin DIGEST-MD5+TLS User logged in
-----------

Restarting Cyrus on the master comes up with this login without TLS on
the replica:

-----------
Feb 19 02:24:55 tripp cyrus/syncserver[22549]: accepted connection
Feb 19 02:24:55 tripp cyrus/syncserver[22549]: cmdloop(): startup
Feb 19 02:24:55 tripp cyrus/syncserver[22549]: login: server [xxx]
syncadmin DIGEST-MD5 User logged in
-----------

Ciao!