[server-admins] SSL IMAP

DM Smith dmsmith at crosswire.org
Sun Nov 18 13:19:52 MST 2018


Peter,

I renewed the cert for mail.crosswire.org <http://mail.crosswire.org/>. Let me know if that helped. If so, Troy and I need to explore why the wildcard cert didn’t work.

DM

> On Nov 18, 2018, at 3:05 PM, DM Smith <dmsmith at crosswire.org> wrote:
> 
> Peter, I’ll take a look. We’ve put in place *.crosswire.org <http://crosswire.org/> and crosswire.org <http://crosswire.org/> for the cert. I spent some time yesterday verifying that they were working for all the prefixes, such as www, tracker, git, community, …. that I could find. I forgot to check mail. It should be configured to use the *.crosswire.org <http://crosswire.org/>, otherwise it is using an expired cert. (which we deliberately let lapse).
> 
> DM
> 
>> On Nov 18, 2018, at 6:32 AM, refdoc at gmx.net <mailto:refdoc at gmx.net> wrote:
>> 
>> Trying to download my emails on to my laptop I encounter an error which is new
>> 
>> ERROR: Unknown SSL protocol connecting to host 'mail.crosswire.org <http://mail.crosswire.org/>' [..] d.h. key too small
>> 
>> I use Debian testing. This is python  using openssl in offlineimap.py
>> 
>> I think there has been done some changes to which protocols are allowed for SSL in the last few days on Debian and our server is limping behind. 
>> 
>> Peter
>> 
>> Sent from my mobile. Please forgive shortness, typos and weird autocorrects.
>> _______________________________________________
>> server-admins mailing list
>> server-admins at crosswire.org <mailto:server-admins at crosswire.org>
>> http://www.crosswire.org/mailman/listinfo/server-admins
> 
> _______________________________________________
> server-admins mailing list
> server-admins at crosswire.org
> http://www.crosswire.org/mailman/listinfo/server-admins

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.crosswire.org/pipermail/server-admins/attachments/20181118/dc3f91f0/attachment.html>


More information about the server-admins mailing list