hey friends,
I am trying to secure my mail server.I have enabled TLS support in
postfix, now I am trying to configure squirrelmail for tls/ssl
support.In config.php i have choosen use_imap_tls=true and
use_smpt_tls=true.
Moreover If I send any mail from squirrelmail there are no entries for
ssl or tls in maillogs whereas If I send the mail through evolution I
can see tls/ssl entries in maillogs.
starting TLS engine
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: setting up TLS connection from [192.168.1.68]
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:before/accept initialization
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv2/v3 read client hello A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv2/v3 read client hello B
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read client hello A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write server hello A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write certificate A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write server done A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 flush data
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv3 read client certificate A
Dec 12 12:30:08 cluster1 last message repeated 2 times
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read client key exchange A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:error in SSLv3 read certificate verify A
Dec 12 12:30:08 cluster1 last message repeated 3 times
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 read finished A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write change cipher spec A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 write finished A
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: SSL_accept:SSLv3 flush data
Dec 12 12:30:08 cluster1 postfix/smtpd[7965]: TLS connection
established from [192.168.1.68]: SSLv3 with cipher RC4-MD5 (128/128
bits)
Why there are errors related to SSL in maillogs ?
But when I did the config.test for squirrelmail I got the below error
Checking IMAP service....
IMAP server ready (* OK dovecot ready.)
Capabilities: * CAPABILITY IMAP4rev1 SORT THREAD=REFERENCES MULTIAPPEND UNSELECT IDLE CHILDREN LISTEXT LIST-SUBSCRIBED NAMESPACE AUTH=PLAIN
ERROR: You have enabled TLS
encryption in the config, but the server does not report STARTTLS
capability. TLS is probably not supported.
Lines of ssl in /etc/dovecot.conf
protocols = imaps pop3s
imaps_listen = *
pop3s_listen = *
ssl_disable = no
ssl_cert_file = /usr/share/ssl/certs/dovecot.pem
ssl_key_file = /usr/share/ssl/private/dovecot.pem
ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat
disable_plaintext_auth = yes
How do I make squirrelmail to use tls/ssl for both imap & smtp.
Thanks & Regards
Ankush Grover
