I have a new server that I am setting up. It currently has a very limited audience (just me), but I am trying to set up IMAPSSL and secure SMTP. Since the audience is so limited, I have decided to not purchase a certificate, and instead am creating a self-signed key architecture.
I used the instructions on https://help.ubuntu.com/community/OpenSSL for doing the setup. Then I installed the key on my server, mail.savannidgerinel.com. I told Thunderbird to include my certificate authority. Then, I try to connect to mail.savannidgerinel.com, imap (port 143), using starttls, and Thunderbird gets angry about the cert. It says...
You are about to override how Thunderbird identifies this site. Legitimate banks <blah blah blah> Server Location: mail.savannidgerinel.com:143 Certificate Status This site attempts to identify itself with invalid information. *Wrong Site* Certificate belongs to a different site, which could indicate an identity theft.
If I connect Thunderbird to port 993, instead, I get the same message (except the Location field is updated to reflect port 993).
So... I tell it to view the certificate. Clear as day, exactly as I told it, it says the Common Name (CN) is mail.savannidgerinel.com. I can see no typos, no name mismatches, nothing except that the port number is different.
If I use 'openssl s_client' to connect, I get a connection just fine, but openssl does complain a little about being unable to verify some certificates (I assume openssl just doesn't know where I've got my CA key squirreled away, but I'm not sure on that, either).
What could be going wrong here? I've done a lot of searches, and never found this problem listed anywhere! So I am at a total loss on how to even begin diagnosing this.