Cannot receive messages on TLSv1.2
I'm using Thunderbird of version 52.5.0 to send and receive messages from/through my company's server. Recently the sever have had a change for its SSL/TLS version, namely we disabled SSLv3 and now the server is working on TLSv1.2. The server provides POP3 on dovecot and SMTP on postfix, and we made changes on both services.
After making the changes, I can send messages from the thunderbird. However, my thunderbird cannot receive messages from the server while other mail client (actually I have seen that only the mailer on iphone) can do that!! The error message is as follows:
An error occurred during a connection to mail.our.server.name:995. Cannot communicate securely with peer: no common encryption algorithm(s). Error code: <a id="errorCode" title="SSL_ERROR_NO_CYPHER_OVERLAP">SSL_ERROR_NO_CYPHER_OVERLAP</a>.
Also, tge setting for my user account is as follows:
Connection Security: SSL/TLS Authentication Method: Normal password.
I don't know how to fix the error. How can I do that? Thanks in advance.
All Replies (3)
You'll have to check the server configuration. This is almost certainly a mis-configuration of the server, where no proper TLS 1.2 cipher suites are allowed.
I actually disabled SSLv3 in ssl_cipher_list as follows
ssl_cipher_list =ALL:+HIGH:TLSv1.2:!SSLv2:!SSLv3:!EXP:!aNULL:!LOW:+MEDIUM
Yes, POP3 works over TLSv1.2 on the sever, but thunderbird cannot get messages.
When we commet-out ssl_cipher_list and put ssl_protocols = !SSLv2 !SSLv3 TLSv1.2.
I can get messages on Thuderbird. What's the difference between the 2 settings?
Modified by makk
This is the Thunderbird support forum, and I can't help with Dovecot problems. The only advice I can give is to check the server logs.