Sun, 19 Feb 2006

Postman/C-client Certificate Problem

When I upgraded my mail server from Woody to Sarge, Postman, my webmail client, stopped working. When trying to log in, I got the following error:

Error: Certificate failure for mail.xerus.org: self signed certificate: /C=US/ST=California/L=Los Angeles/O=Xerus/CN=mail.xerus.org

It turns out that the newer version of C-client, the library that postman uses for IMAP, automatically tries to verify the certificate, even if you have postman configured to connect to the non-SSL port; I guess it calls STARTTLS. Since I'm only using a self-signed certificate, I get the error above.

The solution is to configure postman to not verify the certificate using the novalidate-cert switch in /etc/postman/interdaemon.cfg.

[mail.xerus.org]
imapserver     = mail.xerus.org/novalidate-cert
imapport       = 143
smtpserver     = localhost
;for SMTP authentication. 0=No,1=Must,2=Try
authsmtp       = 0
maildomain     = xerus.org
mailboxprefix  =
remotepath     = ~/mail/
deniedservices =

tech » mail | Permanent Link

The state is that great fiction by which everyone tries to live at the expense of everyone else. - Frederic Bastiat