atom feed4 messages in net.sourceforge.lists.courier-imapRe: [Courier-imap] couriertls: connec...
FromSent OnAttachments
Hamish MarsonSep 14, 2005 2:20 pm 
Brian CandlerSep 14, 2005 11:35 pm 
Hamish MarsonSep 15, 2005 1:37 pm 
Brian CandlerSep 16, 2005 6:27 am 
Subject:Re: [Courier-imap] couriertls: connect: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
From:Brian Candler (B.Ca@pobox.com)
Date:Sep 16, 2005 6:27:29 am
List:net.sourceforge.lists.courier-imap

On Thu, Sep 15, 2005 at 09:37:26PM +0100, Hamish Marson wrote:

couriertls: connect: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number

It doesn't seem to matter what client is used... They all get the same thing.

Can you try running couriertls by itself, against a known working SSL server?

$ env TLS_VERIFYPEER=NONE couriertls -host=imap.example.com -port=993 (should show an IMAP login banner)

or

$ env TLS_PROTOCOL=TLS1 TLS_VERIFYPEER=NONE couriertls -host=www.pobox.com
-port=443 (type GET / and hit enter, you should get a HTML page back)

If that works, post here all the configs in 'imapd' config file relating to TLS. Did you upgrade but forget 'make install-configure' ?

Note that the 'wrong version number' error often occurs if you try to make a TLS connection on a non-TLS server: e.g.

$ env TLS_PROTOCOL=TLS1 TLS_VERIFYPEER=NONE couriertls -host=www.pobox.com
-port=80 couriertls: connect: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version
number

and therefore it may be useful to do 'telnet 127.0.0.1 993' on your own server just to see if you have actually configured a plaintext server on the SSL port.

Regards,

Brian.