<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Peter,<div class=""><br class=""></div><div class="">I renewed the cert for <a href="http://mail.crosswire.org" class="">mail.crosswire.org</a>. Let me know if that helped. If so, Troy and I need to explore why the wildcard cert didn’t work.</div><div class=""><br class=""></div><div class="">DM<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Nov 18, 2018, at 3:05 PM, DM Smith <<a href="mailto:dmsmith@crosswire.org" class="">dmsmith@crosswire.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Peter, I’ll take a look. We’ve put in place *.<a href="http://crosswire.org/" class="">crosswire.org</a> and <a href="http://crosswire.org/" class="">crosswire.org</a> for the cert. I spent some time yesterday verifying that they were working for all the prefixes, such as www, tracker, git, community, …. that I could find. I forgot to check mail. It should be configured to use the *.<a href="http://crosswire.org/" class="">crosswire.org</a>, otherwise it is using an expired cert. (which we deliberately let lapse).<div class=""><br class=""></div><div class="">DM<br class=""><div class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On Nov 18, 2018, at 6:32 AM, <a href="mailto:refdoc@gmx.net" class="">refdoc@gmx.net</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Trying to download my emails on to my laptop I encounter an error which is new<br class=""><br class="">ERROR: Unknown SSL protocol connecting to host '<a href="http://mail.crosswire.org/" class="">mail.crosswire.org</a>' [..] d.h. key too small<br class=""><br class="">I use Debian testing. This is python using openssl in offlineimap.py<br class=""><br class="">I think there has been done some changes to which protocols are allowed for SSL in the last few days on Debian and our server is limping behind. <br class=""><br class="">Peter<br class=""><br class="">Sent from my mobile. Please forgive shortness, typos and weird autocorrects.<br class="">_______________________________________________<br class="">server-admins mailing list<br class=""><a href="mailto:server-admins@crosswire.org" class="">server-admins@crosswire.org</a><br class=""><a href="http://www.crosswire.org/mailman/listinfo/server-admins" class="">http://www.crosswire.org/mailman/listinfo/server-admins</a><br class=""></div></div></blockquote></div><br class=""></div></div></div>_______________________________________________<br class="">server-admins mailing list<br class=""><a href="mailto:server-admins@crosswire.org" class="">server-admins@crosswire.org</a><br class="">http://www.crosswire.org/mailman/listinfo/server-admins<br class=""></div></blockquote></div><br class=""></div></body></html>