environment:
OpenBSD 4.0/i386, chrooted apache, roundcube 0.1-rc1, dovecot 1.0.2 (yes, i should probably get this upgraded)
i am providing services to a few dozen users via an https url. after applying the update to -rc2, i was unable to login via the web interface. /logs/errors shows:
[26-Dec-2007 14:58:56 +0000] IMAP Error: Invalid password
after looking around at the dovecot logs, and finding nothing, i decided to crank up the logging (in dovecot and roundcube). still nothing, and after taking a peek with tcpdump i suspected that the requests weren't even making it to dovecot.
running `openssl s_client -connect 127.0.0.1:993' confirmed my suspicions (i think), as it worked just fine:
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA Server public key is 1024 bit
[...snip...]
A345 login john XXXXXXXXX A345 OK Logged in. Z345 logout
Z345 OK Logout completed. read:errno=0
i believe the relevant parts of main.inc.php are:
// the mail host chosen to perform the log-in // leave blank to show a textbox at login, give a list of hosts // to display a pulldown menu or set one host as string. // To use SSL connection, enter ssl://hostname:993 $rcmail_config['default_host'] = 'ssl://localhost:993';
// TCP port used for IMAP connections $rcmail_config['default_port'] = 993;
i have tried changing `localhost' to the FQDN of my host (plus other relevant config changes), and a few other permutations, none of which shed any light on the scene for me.
anything from playful nudges to get me looking in the right direction to hitting me right upside the head with a cluestick will be much appreciated.
regards, --john
List info: http://lists.roundcube.net/users/