Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #174762 > unrolled thread
| Started by | tony@vanderhoff.org |
|---|---|
| First post | 2016-11-15 18:10 +0100 |
| Last post | 2016-11-15 19:20 +0100 |
| Articles | 3 — 2 participants |
Back to article view | Back to linux.debian.user
courier-imap fails tony@vanderhoff.org - 2016-11-15 18:10 +0100
Re: courier-imap fails Markus Schönhaber <debian-user@list-post.mks-mail.de> - 2016-11-15 19:00 +0100
Re: courier-imap fails tony@vanderhoff.org - 2016-11-15 19:20 +0100
| From | tony@vanderhoff.org |
|---|---|
| Date | 2016-11-15 18:10 +0100 |
| Subject | courier-imap fails |
| Message-ID | <sDPp7-7LU-21@gated-at.bofh.it> |
I've just upgraded my VPS from Wheezy to Jessie. Most things work fine, but my mail service has died. The only clue is in /var/log/mail.info: imapd-ssl: couriertls: accept: error:14094417:SSL routines:SSL3_READ_BYTES:sslv3 alert illegal parameter It turns out that this was reported in bug #787579, which I think should have been resolved by now. Googling suggests a work-around: DH_BITS=2048 mkdhparams, but this seems to have little effect. I'm not sure what format a PEM file should take, but my dhparams.pem is only 201 bytes, which seems a bit small. Anyway, can anyone please suggest any remedy, please.
[toc] | [next] | [standalone]
| From | Markus Schönhaber <debian-user@list-post.mks-mail.de> |
|---|---|
| Date | 2016-11-15 19:00 +0100 |
| Message-ID | <sDQbw-836-7@gated-at.bofh.it> |
| In reply to | #174762 |
Tony, Di 15 Nov 2016 18:01:40 CET: > The only clue is in /var/log/mail.info: > imapd-ssl: couriertls: accept: error:14094417:SSL > routines:SSL3_READ_BYTES:sslv3 alert illegal parameter > > It turns out that this was reported in bug #787579, which I think should > have been resolved by now. Googling suggests a work-around: DH_BITS=2048 > mkdhparams, but this seems to have little effect. I'm not sure what format > a PEM file should take, but my dhparams.pem is only 201 bytes, which seems > a bit small. Have you checked that the mkdhparams script really did create a new dhparams.pem? Looking at the man page of mkdhparams indicates that it does nothing if dhparams.pem exists and is less than 25 days old. -- Regards mks
[toc] | [prev] | [next] | [standalone]
| From | tony@vanderhoff.org |
|---|---|
| Date | 2016-11-15 19:20 +0100 |
| Message-ID | <sDQuS-8u6-13@gated-at.bofh.it> |
| In reply to | #174765 |
> Tony, Di 15 Nov 2016 18:01:40 CET: > >> The only clue is in /var/log/mail.info: >> imapd-ssl: couriertls: accept: error:14094417:SSL >> routines:SSL3_READ_BYTES:sslv3 alert illegal parameter >> >> It turns out that this was reported in bug #787579, which I think should >> have been resolved by now. Googling suggests a work-around: DH_BITS=2048 >> mkdhparams, but this seems to have little effect. I'm not sure what >> format >> a PEM file should take, but my dhparams.pem is only 201 bytes, which >> seems >> a bit small. > > Have you checked that the mkdhparams script really did create a new > dhparams.pem? Looking at the man page of mkdhparams indicates that it > does nothing if dhparams.pem exists and is less than 25 days old. > Thank you, Markus; that was indeed the problem. Well spotted!
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web