[Bug 1420648] Re: Client certificate verfication fails

[Daniel Dickinson]

It turns out the actual bug is with Thunderbird.  If you use your
existing profile and change the IMAP software running on the same email
server, then, even if you modify the Thunderbird accounts you were using
to point to no server, and eliminate all visible config that might
conflict, including saved password, then, you new accounts (but same
username) to the same email server with different IMAP software (in my
case switching from cyrus-imap to dovecot; I uncovered this by trying to
switch back to cyrus-imap and having the same issues (the email server
had to have been rebuilt due to hardware failure, and I had decided to
switch IMAP software at the same time)).

It seems Thunderbird doesn't like it when you don't start with a fresh
profile in this type of scenario.

Regards,

Daniel

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1420648

Title:
  Client certificate verfication fails

Status in dovecot package in Ubuntu:
  New

Bug description:
  If you use the option
  auth_ssl_require_client_cert = yes

  Then no matter how carefully you follow the documentation are all the
  attempts provide support your clients (e.g. Thunderbird) will fail to
  connect to the dovecot mail server.  This issue does not with cyrus-
  imap mail server.

  I have investigated the code and believe I have found and fixed the
  issue (the attached patch makes verification of client side SSL
  certificates work for me, which is NOT true without the patch).

  Basically the OpenSSL logic is wrong when it comes to setting up the
  client side verification.

  I have a DebDiff against Trusty that fixes the issue. (Attached).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1420648/+subscriptions