[Pkg-openssl-devel] Bug#573889: Bug#573889: libssl0.9.8: unknown message digest algorithm error in dovecot

[Kurt Roeckx]

reassign 573748 libssl0.9.8 0.9.8m-2
merge 573748 573889
thanks

On Sun, Mar 14, 2010 at 08:07:06PM +0100, Marcus Jodorf wrote:
> Package: libssl0.9.8
> Version: 0.9.8m-2
> Severity: important
> 
> This seems to be related to bug #573748 which was reassigned from libssl0.9.8 to postfix.
> 
> I ran into similar problems with my dovecot (1.2.10-1) installation.
> After upgrading to libssl0.9.8m-2 I'm unable to connect to my dovecot server (which uses a self-signed certificate) using tls/ssl connections.

Then I have to think this is a problem in libssl again, but
currently no idea where to start to look.

With which program do you connect to dovecot?  Are you doing
it with imap (port 143) or imaps (port 993)?

Can you try connecting to it using s_client?  Something like:
openssl s_client -connect localhost:143 -starttls imap -CAfile /etc/ssl/certs/dovecot.pem
or:
openssl s_client -connect localhost:993 -CAfile /etc/ssl/certs/dovecot.pem

Does that work?  Does that produce anything in the log file
indicating an error with tls/ssl?

Everything works for me, both using port 143 and 993.  I'm just using
the self-signed cert that dovecot auto generates.

I need some way to reproduce this.


Kurt