1 I am suddenly getting an error message on the PKI certificate for TLS/SSL authentication, saying the cert is expired.

2 Blep?

I don't actually have a certficate, which might explain it.

3 Thunderbird certainly seems to, very suddenly, think that you do. This started yesterday evening, which would be when you were updating things.

Also, all of a sudden one of my mailman lists is bouncing messages?

4 Hmm.

I'm going to have to do a bit of testing. Certainly, I never bought a certificate for the server; the POP server might have been set up with a default certificate which you had to accept initially, and I should be able to re-generate that (or something).

As for your mailman list - that's very odd. Could you forward the informative part of a couple of the bounces to me?

There was a potential security hole in the way POP and IMAP were set up by CPanel, hence the conversion, but that should have no effect on Mailman.

5 Pixy, the problem is IMAP, not POP. It has what appears to be a self-signed cert.

6 Right.

Hmm.

Can you access it if you turn off SSL/TLS?

I'll see if there are any notes about this.

7 Gary's getting bounces with the Bestofme mailman list as well.

8 Here's the bounce message:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

Bestofmereminders@snoozebuttondreams.com
local delivery failed

------ This is a copy of the message, including all the headers. ------

Return-path:
Received: from [216.200.145.36] (helo=omta16.mta.everyone.net)
by mew.mu.nu with esmtp (Exim 4.52)
id 1EQnO5-0004Hi-Fp
for Bestofmereminders@snoozebuttondreams.com; Sat, 15 Oct 2005 09:51:53
-0500
Received: from dm16.mta.everyone.net (bigiplb-dsnat [172.16.0.19])
by omta16.mta.everyone.net (Postfix) with ESMTP id 560C54033B
for ; Sat, 15 Oct 2005
07:51:55 -0700 (PDT)
X-Eon-Dm: dm16
Received: from [127.0.0.1] (172.149.247.190 [172.149.247.190])
by dm16.mta.everyone.net (EON-AUTHRELAY2) with ESMTP id
dm16.433b46f8.1f40f0
for ; Sat, 15 Oct 2005
07:51:54 -0700 (PDT)
X-Eon-Sig: AQHaXjtDUReKToPYGwIAAAAB,b1e006ac178d1253c8474f7844b27dc3
Message-ID:
Date: Sat, 15 Oct 2005 10:51:48 -0400
From: Gary Cruse
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5)
Gecko/20041217
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Bestofmereminders List
Subject: BOMS test
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

This is a test of the BOMS reminder service.

9 Okay, other people have reported the same issue with mailing lists, and apparently there is a fix, which I'm applying now.

Fingers crossed!

10 Pixy, I could always access the IMAP server, I just had to accept the expired cert. Naturally, when I turn off TLS/SSL authentication I no longer get the error message about the expired cert.

11 Okey dokey, that just means I need to find out why it lost its certificate.

I've applied the patch, so could you see if your mailing list is behaving itself now?

12 yay! All is well with mailman!

I said that wrong on the IMAP server. I never got an expired cert error before. Even when I did start getting the expired cert error, I could always get into IMAP using secure communication. I think you just need to regen the self-signed cert.

13 I don't know if this has got anything to do with it, but I just got back from holidays (great, thanks for asking) and found Neomail had disappeared. Is this a permanent state of affairs?

14 Erm. I don't think it's related. It was probably an automatic update of CPanel that did that without notifying me.

I'll look into it.

15 Even stranger now - I used Horde instead today but now I can't get into that, either.

BTW, if Neomail's gone, have I lost my address book as well?

16 Okay, Neomail is still supposed to be intalled and active, but isn't working. I need to investigate some more.

What happens when you try to get into Horde?

17 Ugh.

I've confirmed that the upgrade disables Neomail. Of course, they don't mention that fact beforehand.

Looking for a solution now.

18 Your address book should be recoverable in any case. It's disabled the application, but all the data is still there.

19 Did I mention that it appears, now, that IMAP is no longer supporting TLS/SSL?

20 Well naturally enough Horde is working this morning. I'm happy enough to use Horde but how do I recover my address book?

21 I'll dig it out for you.

22 I think with the new version I have to configure TLS manually. Which I will do. Very soon.