IMAP Server: SSL Handshake failure: SSL Error: Network IO error

HCL Domino Domino Forum
1

IMAP Server: SSL Handshake failure: SSL Error: Network IO error

Does anyone know what is causing this?

IMAP seems to be working fine, but the error is in the server logs again and again.

Thanks

Uwe

2

Subject: IMAP Server: SSL Handshake failure: SSL Error: Network IO error

There is a bug in IE where they will messily terminate the connection (just FIN the TCP connection without an SSL close_alert) in order to prompt the user to choose a client certificate. This unclean termination will result in the “network IO error” being logged to the server console, since there are no good ways to determine the difference between IE and an attempted truncation attack.

Could that explain what you are seeing?

dave

3

Subject: RE: IMAP Server: SSL Handshake failure: SSL Error: Network IO error

Thanks for explaining this.

You ask:

Could that explain what you are seeing?

Not exacly. Most of my users are using Mozilla 1.1.x / 1.2.x / 1.3.x / 1.4.x over SSL (aka IMAPs)

Due to the fact that no one is using IE to read email (with the exception for iNotes web mail) I’m surprised that IE is causing this IMAP problem.

My SSL key is 1024 Bits strong and I have also enabled V2 SSL. The funny part is that the http server is not complaining - it’s the IMAP task.

As soon as I stop that task, the messages disapear. So, it looks like the IMAP task is complaining about something strange happening when my users use the IMAPs protocol.

Any more insights?

Thanks,

Uwe