Negotiation failed with Ipad after upgrade

[Paul van der Vlis]

Op 14-06-17 om 00:49 schreef Johan Hattne:
> 
>> On Jun 13, 2017, at 15:42, Paul van der Vlis <paul at vandervlis.nl> wrote:
>>
>> Hello,
>>
>> I have upgraded a server from version 2.4.17 to 2.5.10 (Debian
>> packages), and now an Ipad does not work anymore. The error is something
>> like:
>>
>> Jun 13 21:18:18 hostname cyrus/imap[10664]: STARTTLS negotiation failed:
>> host.domain.nl [1.2.3.4]
>>
>> No problem with Thunderbird and Android devices, they work fine.
>>
>> I've also tested imaps, but the same problem there.
>>
>> In imapd.conf I have this setting:
>> tls_ciphers: TLSv1.2:+TLSv1:+HIGH:!aNULL:@STRENGTH
>>
>> In the old version I had this setting:
>> tls_cipher_list: TLSv1+HIGH:!aNULL:@STRENGTH
>>
>> What will be wrong?
> 
> Could it be this?
> 
>   https://github.com/cyrusimap/cyrus-imapd/issues/1872
> 
> I saw that predominately from Apple portable devices with the Debian testing packages.

It is possible, but not sure it's the same.

What helps is using the old setting in imapd.conf:
tls_cipher_list: TLSv1+HIGH:!aNULL:@STRENGTH

With regards,
Paul van der Vlis



-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/