dovecot – Dovecot IMAP-Login: Confusing Error Message

dovecotimap

I am busy setting up a mailserver with postfix, dovecot and mariadb on a Debian 9 system.

Receiving mail fails on port 993 as result of a time-out with this message in/var/log/dovecot.log:

imap-login: Info: Disconnected (no auth attempts in 117 secs): user=<>, rip=1.2.3.4, lip=2.3.4.5, TLS handshaking: SSL_accept() syscall failed: Success, session=<+tax6Y97OpplYc73>

I am confused by the words accept, failed and Success.
Obviously something failed, because imap on 993 timed-out.
Could the message indicate the cause of the failure?

Best Answer

Start by checking that the SSL CERT is in order, installed at the correct location and has the correct file owner and mode. 644 for the certificate and 600 for the private key

Then test it manually, using: openssl s_client -connect mailserver.example.com:993 -crlf

You should see the certificates in clear text, and a line at the end: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready.

Then you know that the system is ready to accept the AUTH command.

Edit

/etc/dovecot/dovecot.conf : check the settings for ssl_ca, ssl_cert and ssl_key

Related Topic