2020/10/30

Codeblog 2024/11/14 untangling setup calls - mostly just notes to myself 2023/06/04 config classes 2023/05/01 DataPorts redesign 2022/07/21 FutilityCloud process design 2022/08/14 Windows joke I wrote in the late 1900s (on TootCat) 2022/07/21 render-dispatch rubberduckery 2022/07/20 comments on The Home Computer Generation 2022/07/18 layout-event rubberducking 2022/06/24 event-object as output container: the consequences 2022/06/23 event-object as output container: the revision 2022/05/30 more data-class rubberducking 2022/05/20 rubberducking about data classes 2022/01/15 standard CV data format 2021/12/17 The Great Data-Class Restacking 2021/11/25 PHP documentation gripe 2021/11/24 things you can't do in PHP 2021/11/23 PortBank refactoring part 2 2021/11/22 PortBank refactoring part 1 2021/11/08 data objects refactoring 2021/11/05 notes for event-system burndown 2021/07/31 a code mystery 2021/05/31 new PHP wishlist item: first keyword 2021/05/28 a kluge using abstract methods 2021/03/21 PHP wishlist 2020/12/04 (notes) 2020/10/30 (notes) 2020/10/29 (notes) 2020/10/28 (notes) 2020/10/27 (notes: Dovecot on cloud5) 2020/08/29 MediaWiki SpecialPages 2020/08/25 The Plex API 2020/06/12 Ferreteria: thoughts on the Wikcess/flex-data system 2020/04/23 Ferreteria: quick notes on a design issue 2020/04/22 Ferreteria: some thoughts on apps vs. frameworks 2020/02/10 job application (yes, I actually sent this in)

This is the error I get on #Dovecot when #Eudora tries to connect:

Oct 30 14:56:52 cloud1 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=107.15.53.219, lip=68.183.140.54, TLS handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<z0tcm+SyoQ9rDzXb>

I don't know why it says no auth attempts or why the SSL failed, though I'd guess maybe Dovecot is no longer supporting the highest version of TLS that Eudora speaks?

Others seem to agree that the problem is Dovecot dropping support for the old version of SSL that Eudora uses. I downloaded the Eudora source code, and it includes a lot of design documentation with extensive notes on how Eudora's SSL works (SSL Notes.txt) -- so that may be a good thing to study.

One suggestion was to add

ssl_protocols = SSLv3 TLSv1

to the sftp://root@cloud1.vbz.ovh/etc/dovecot/conf.d/10-ssl.conf, which resulted in Eudora asking for a password, but then failing with the same pair of errors. On the server side, these lines were logged:

Oct 30 20:06:35 cloud1 dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=107.15.53.219, lip=68.183.140.54, TLS handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<MqYC7+iygVZrDzXb>
Oct 30 20:06:36 cloud1 dovecot: imap-login: Login: user=<harena>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=4185099, secured, session=<uDMM7+iyYKt/AAAB>
Oct 30 20:06:36 cloud1 dovecot: imap(harena)<4185099><uDMM7+iyYKt/AAAB>: Logged out in=93 out=1043 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0

On closer examination, the last two lines must be Roundcube successfully logging in at almost the same time -- so they're not part of the Eudora interaction. The Eudora interaction is then unchanged.