Can't connect to Kolab/Guam 16 with Thunderbird 45.7
Teemu Pulliainen
teemu at tmu.fi
Tue Feb 14 13:49:05 CET 2017
On 02/14/2017 11:30 AM, Gufler, Thomas wrote:
> Hello,
>
> having a interesting problem. I can connect with Thunderbird on Ubuntu
> 16.04 to a Kolab server (roundcube works as well) but not with
> Thunderbird on Arch or Fedora 25 (to the same system).
> Trying to create an Thunderbird Account on this two systems ends with
> an error "Configuration could not be verified - is the username or
> password wrong?".
>
> In the guam error.log I get:
>
> error] <0.89.0> Supervisor {<0.89.0>,kolab_guam_listener} had child
> session started with {kolab_guam_session,start_link,undefined} at
> <0.174.0> exit with reason
> {{function_clause,[{ssl_cipher,hash_algorithm,"\b",[{file,"ssl_cipher.erl"},{line,1196}]},{ssl_handshake,'-dec_hello_extensions/2-lc$^0/1-1-',1,[{file,"ssl_handshake.erl"},{line,1706}]},{ssl_handshake,'-dec_hello_extensions/2-lc$^0/1-1-',1,[{file,"ssl_handshake.erl"},{line,1707}]},{ssl_handshake,dec_hello_extensions,2,[{file,"ssl_handshake.erl"},{line,1706}]},{tls_handshake,decode_handshake,3,[{file,"tls_handshake.erl"},{line,184}]},{tls_handshake,get_tls_handshake_aux,3,[{file,"tls_handsha..."},...]},...]},...}
> in context child_terminated
>
>
> I already tried to switch from the certificates in the standard
> installation to letsencrypt signed one - but with the same result.
>
> Any ideas?
>
> Best regards,
> Thomas
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users
Hi,
might have something to do with more recent NSS/TLS 1.3 as described in
https://git.kolab.org/T1775 and
https://kanarip.wordpress.com/2016/11/04/heads-up-on-nss-3-27-guam/.
I don't think that's the exact same error message I once got (and
according to the bug tracker, T1775 would seem to be fixed on the Kolab
side already). Anyway, you might want to at least test using TLS 1.1 in
Thunderbird as shown in
http://lists.kolab.org/pipermail/users/2016-November/020985.html.
Assuming you have the same issue with every client on Fedora 25/Arch and
not just Thunderbird, you might want to try something like "openssl
s_client -connect yourserver.tld:993 -servername yourserver.tld" to see
if that produces a handshake error as well.
-Teemu
More information about the users
mailing list