openssl problem

I'm trying to access my IMAPS (dovecot) server on my laptop
while on holiday.
But when I run kmail I get the message
"Could not connect to host <myserver>".
Both server and laptop are running Fedora 7 + KDE.

I suspect the problem lies in my openssl setup,
as when I run
openssl s_client -ssl2 -crlf -host <myserver> -port 993
I get no response - the program just waits until I press ctrl-C.

I have a peephole opened at port 993 on my server,
and iptables should let this through -
I am running shorewall, and have
IMAPS/ACCEPT net $FW
in /etc/shorewall/rules on the server.

When I
telnet <server> 993
I just get the response "Trying <server IP>"
and nothing more (until I press ctrl-C).

As is probably obvious, I am fairly ignorant about all this.
I can access my server with ssh, and so can change anything there.

Any suggestions or advice gratefully received.


--
Timothy Murphy
e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
tel: +353-86-2336090, +353-1-2842366
s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

On 2007-08-30, Timothy Murphy <(E-Mail Removed)> wrote:
> I suspect the problem lies in my openssl setup,

From what you said:

> When I
> telnet <server> 993
> I just get the response "Trying <server IP>"
> and nothing more (until I press ctrl-C).

It doesn't seem a problem in Openssl, maybe in firewalling or your IMAP
server isn't listening on the SSL port (993).

First of all, check if your IMAP server is working, a netstat -an | grep
993 should show your server listening on all IPs (0.0.0.0), otherwise,
check your IMAP configuration, a telnet from localhost to localhost 993
should work (on the IMAP server of course) and then check if when you
try connecting from the other machine you get something in your
server (using tcpdump).

Davide


--
Double your drive space: Delete Windows!

Timothy Murphy wrote:
>
> [snip]
>
> When I
> telnet <server> 993
> I just get the response "Trying <server IP>"
> and nothing more (until I press ctrl-C).
>
> [snip]

.... which means the TCP connection isn't completing. I can think of
four reasons (in no particular order).

1. A firewall somewhere is blocking it.
2. The service isn't listening.
3. Routing points in between don't know how to deliver the packets.
4. DNS can't resolve the <server> name.