Troubleshooting help

From: Guy <wyldfury#gmail.com>
Date: Thu, 22 Jan 2009 10:20:29 +0000


Hi,

I'm running two haproxy servers in front of my IMAP servers running Dovecot. I've got some users getting intermittent "certificate cannot be verified" errors when connecting to IMAP via SSL with various mail clients. I've mailed the Dovecot list, but there weren't any errors in the Dovecot logs, just a connection, no auth attempts and a disconnect so I suspect it may have something to do with the connection to the IMAP server. I've got debug logging enabled on haproxy, but it doesn't provide much in the way of information besides the source and local IP. Is there any further debug logging that can be done? Or suggestions on what I can look for that might show me where the problem is?

Thanks
Guy

===

global

        daemon
        maxconn 6000
        ulimit-n 16384
        log 207.210.68.98:514 local5 debug
        log 127.0.0.1:514 local6 info
        uid 99
        gid 99
        chroot /root
        pidfile /var/run/haproxy-private.pid

defaults
        log global

listen  imaps_ssl :993
        clitimeout 60000
        srvtimeout 30000
        contimeout 4000
        mode tcp
        balance source
        server stoat 75.127.69.66:993 weight 50
        server mink 209.51.133.130:993 weight 50

===
-- 
Don't just do something...sit there!
Received on 2009/01/22 11:20

This archive was generated by hypermail 2.2.0 : 2009/01/22 11:30 CET