我在网上看到过一些类似问题的答案,但没有一个能帮助我解决这个问题。
我在服务器上直接安装了一个 Thunderbird 实例,它可以从服务器上获取邮件。服务器上的其他客户端可以从服务器上获取邮件,其他 Thunderbird 客户端也可以从其他服务器获取邮件。
多年来,我一直在我的一台 Debian Linux 服务器上运行 Dovecot 作为 IMAP 服务器。大约在 1 月初,它不再允许 Thunderbird 客户端下载电子邮件。我尝试了所有我能想到的方法,查看了所有我知道的方法,但还是找不到问题所在。我想,如果我可以强制 Thunderbird 客户端允许刷新 IMAP 系统的服务器证书,也许会有所帮助,但当我尝试从系统获取证书时,Thunderbird 说无法获取。有人知道我应该怎么做吗?
doveconf-n:
# 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.19 (4eae2f79)
# OS: Linux 6.1.0-10-amd64 x86_64 Debian 12.1
# Hostname: RAID-Server
debug_log_path = /var/log/dovecot/mail.bug
info_log_path = /var/log/dovecot/mail.inf
log_path = /var/log/dovecot/mail.err
mail_location = mbox:~/mail:INBOX=~/mail/inbox
namespace inbox {
inbox = yes
location =
mailbox Drafts {
special_use = \Drafts
}
mailbox Junk {
special_use = \Junk
}
mailbox Sent {
special_use = \Sent
}
mailbox "Sent Messages" {
special_use = \Sent
}
mailbox Trash {
special_use = \Trash
}
prefix =
}
passdb {
driver = pam
}
protocols = " imap"
ssl_cert = </etc/dovecot/private/dovecot.pem
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
userdb {
driver = passwd
}
protocol imap {
mail_max_userip_connections = 50
}
root@Backup:~# openssl s_client -connect 192.168.1.50:993 -tls1_2
CONNECTED(00000003)
---
Certificate chain
0 s:CN = RAID-Server.att.net
i:CN = RAID-Server.att.net
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
v:NotBefore: Oct 30 01:53:54 2019 GMT; NotAfter: Oct 27 01:53:54 2029 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
<removed>
-----END CERTIFICATE-----
subject=CN = RAID-Server.att.net
issuer=CN = RAID-Server.att.net
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1388 bytes and written 281 bytes
Verification error: self-signed certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: AE20DEEF2FD8CC7F3881B59D51CBCB23B436E92DF06F87124F7E8A760010FFAB
Session-ID-ctx:
Master-Key: 2FC5D8CF5E6C8D77A9BA3FB659F026E6E83328A1BF98E9EF12736DC9B3778BD2260DBB1588CE0E731BF21479DC1D81A0
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 7200 (seconds)
TLS session ticket:
0000 - af bc 75 17 7e 2e 44 35-67 52 2e b4 72 7c 18 49 ..u.~.D5gR..r|.I
0010 - 5e 63 02 50 39 b7 47 d6-de 02 2b e9 ff e9 6b fa ^c.P9.G...+...k.
0020 - 5f 27 f2 85 a0 a6 63 47-58 65 be f6 54 f7 96 1e _'....cGXe..T...
0030 - e2 b5 d4 af c7 be 06 8b-8f 15 5e 65 55 27 46 61 ..........^eU'Fa
0040 - d7 e4 75 08 27 47 97 67-a6 37 bc 67 49 17 24 ab ..u.'G.g.7.gI.$.
0050 - 78 6f c8 ba af 3e e6 b0-b4 f3 96 9f c3 0a e5 bc xo...>..........
0060 - 70 30 c6 9e e2 2d 68 37-a1 68 2c dd dc b8 12 87 p0...-h7.h,.....
0070 - 9a 60 fd 1f be 25 8a 10-19 46 83 47 ea 7d 8c 16 .`...%...F.G.}..
0080 - d8 b8 18 ea 38 12 95 23-96 ac 13 82 e2 04 16 6c ....8..#.......l
0090 - c7 77 bd 80 59 91 2d a2-28 f7 75 f7 ce 5a 7e 1f .w..Y.-.(.u..Z~.
Start Time: 1708484596
Timeout : 7200 (sec)
Verify return code: 18 (self-signed certificate)
Extended master secret: yes
---
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Debian) ready.
答案1
您是否有这样的用于日志记录的配置文件
##
## Log destination.
##
# Log file to use for error messages. "syslog" logs to syslog,
# /dev/stderr logs to stderr.
log_path = syslog
# Log file to use for informational messages. Defaults to log_path.
#info_log_path =
# Log file to use for debug messages. Defaults to info_log_path.
#debug_log_path =
# Syslog facility to use if you're logging to syslog. Usually if you don't
# want to use "mail", you'll use local0..local7. Also other standard
# facilities are supported.
syslog_facility = mail
##
## Logging verbosity and debugging.
##
# Log unsuccessful authentication attempts and the reasons why they failed.
auth_verbose = yes
# In case of password mismatches, log the attempted password. Valid values are
# no, plain and sha1. sha1 can be useful for detecting brute force password
# attempts vs. user simply trying the same password over and over again.
# You can also truncate the value to n chars by appending ":n" (e.g. sha1:6).
auth_verbose_passwords = sha1:6
# Even more verbose logging for debugging purposes. Shows for example SQL
# queries.
#auth_debug = no
# In case of password mismatches, log the passwords and used scheme so the
# problem can be debugged. Enabling this also enables auth_debug.
#auth_debug_passwords = no
# Enable mail process debugging. This can help you figure out why Dovecot
# isn't finding your mails.
#mail_debug = no
# Show protocol level SSL errors.
verbose_ssl = yes
# mail_log plugin provides more event logging for mail processes.
plugin {
# Events to log. Also available: flag_change append
#mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
# Available fields: uid, box, msgid, from, subject, size, vsize, flags
# size and vsize are available only for expunge and copy events.
#mail_log_fields = uid box msgid size
}
##
## Log formatting.
##
# Prefix for each line written to log file. % codes are in strftime(3)
# format.
#log_timestamp = "%b %d %H:%M:%S "
# Space-separated list of elements we want to log. The elements which have
# a non-empty variable value are joined together to form a comma-separated
# string.
#login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
# Login log format. %s contains login_log_format_elements string, %$ contains
# the data we want to log.
#login_log_format = %$: %s
# Log prefix for mail processes. See doc/wiki/Variables.txt for list of
# possible variables you can use.
#mail_log_prefix = "%s(%u): "
# Format to use for logging mail deliveries. You can use variables:
# %$ - Delivery status message (e.g. "saved to INBOX")
# %m - Message-ID
# %s - Subject
# %f - From address
# %p - Physical size
# %w - Virtual size
#deliver_log_format = msgid=%m: %$
另外你可以试试这个看看会发生什么
sudo apt-get install mailutils
imap4d your_imap_server_address