[Freedombox-discuss] Cannot connect to internal imap server from Roundcube. Work-around: enable plaintext auth.

[A. F. Cano]

On Tue, Aug 02, 2022 at 05:22:33PM -0400, A. F. Cano wrote:

> And this is what the imap server says:
> 
> Aug  2 17:16:17 hp-i3 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.200.<IP of FreedomBox>, lip=192.168.200.<IP of imap server>, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session=<AUyIoEjlorfAqMgb>

Not really a solution, but if I set:

disable_plaintext_auth = no

in /etc/dovecot/conf.d/10-auth.conf

Roundcube can then connect.

With debugging enabled, I got a little more info:

Aug  3 08:14:45 hp-i3 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.200.<IP of FreedomBox>, lip=192.168.200.<IP of imap server>, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca: SSL alert number 48, session=<sEm2LVXlNJzAqMgb>