Discussion:
[SM-imapproxy] imapproxy using STARTTLS with Let's Encrypt certificate
c***@web.de
2016-09-04 17:41:26 UTC
Permalink
Hello!

I want to user imapproxy and STARTTLS with Let's Encrypt certificate.

Imapproxy is running on the mailserver. (This mailserver provides webserver, too.)

I can connect from a Webmail Client to the mailserver using STARTTLS and port 143 w/o issues if imapproxy is stopped.
If imapproxy is started, I can only connect to mailserver when security disenabled.

imapproxy is listening on port 32143, and the relevant port in the firewall is open.

When I test the configuration using STARTTLS, I get this error message:
STARTTLS is not supported.

There's nothing written to /var/log/imapproxy_protocol.log

Any advice?

This is my configuration:
## imapproxy.conf
##
## This is the global configuration file for imapproxy.
## Lines beginning with a '#' sign are treated as comments and will be
## ignored. Each line to be processed must be a space delimited
## keyword/value pair.
##

server_hostname localhost

connect_retries 10
connect_delay 5

cache_size 3072

listen_port 32143

server_port 143

cache_expiration_time 300

proc_username nobody
proc_groupname nogroup

stat_filename /var/run/pimpstats

protocol_log_filename /var/log/imapproxy_protocol.log

syslog_facility LOG_MAIL

#syslog_prioritymask LOG_WARNING

send_tcp_keepalives no

enable_select_cache no

foreground_mode no

force_tls no

#chroot_directory /var/lib/imapproxy/chroot

enable_admin_commands no

tls_ca_path /var/lib/imapproxy/chroot/
tls_ca_file /var/lib/imapproxy/chroot/mehl.biszumbitterenen.de.pem
tls_cert_file /var/lib/imapproxy/chroot/cert.pem
tls_key_file /var/lib/imapproxy/chroot/privkey.pem
Paul Lesniewski
2016-09-11 23:09:12 UTC
Permalink
Post by c***@web.de
Hello!
I want to user imapproxy and STARTTLS with Let's Encrypt certificate.
Imapproxy is running on the mailserver. (This mailserver provides webserver, too.)
I can connect from a Webmail Client to the mailserver using STARTTLS and
port 143 w/o issues if imapproxy is stopped.
If imapproxy is started, I can only connect to mailserver when security disenabled.
imapproxy is listening on port 32143, and the relevant port in the firewall is open.
STARTTLS is not supported.
That string isn't in imapproxy source code.

Also, you should state what version you are using (STARTTLS code was fixed
in 1.2.8-SVN)
Post by c***@web.de
There's nothing written to /var/log/imapproxy_protocol.log
Maybe you aren't talking to imapproxy at all?
Post by c***@web.de
Any advice?
## imapproxy.conf
##
## This is the global configuration file for imapproxy.
## Lines beginning with a '#' sign are treated as comments and will be
## ignored. Each line to be processed must be a space delimited
## keyword/value pair.
##
server_hostname localhost
connect_retries 10
connect_delay 5
cache_size 3072
listen_port 32143
server_port 143
cache_expiration_time 300
proc_username nobody
proc_groupname nogroup
stat_filename /var/run/pimpstats
protocol_log_filename /var/log/imapproxy_protocol.log
syslog_facility LOG_MAIL
#syslog_prioritymask LOG_WARNING
send_tcp_keepalives no
enable_select_cache no
foreground_mode no
force_tls no
#chroot_directory /var/lib/imapproxy/chroot
enable_admin_commands no
tls_ca_path /var/lib/imapproxy/chroot/
tls_ca_file /var/lib/imapproxy/chroot/mehl.biszumbitterenen.de.pem
tls_cert_file /var/lib/imapproxy/chroot/cert.pem
tls_key_file /var/lib/imapproxy/chroot/privkey.pem
Loading...