I'm having building the correct certificate chain. My certificate issue a class 2 issued by StartSSL.
Here's in order what I have put in my ssl.crt:
my cert https://www.startssl.com/certs/ca.pem https://www.startssl.com/certs/class2/sha1/pem/sub.class2.client.sha1.ca.pem https://www.startssl.com/certs/class2/sha1/pem/sub.class2.server.sha1.ca.pem
(I put the links to allow you to see where I took the files)
If I do a
openssl s_client -connect multiformeingegno.it:993 I get:
Verify return code: 19 (self signed certificate in certificate chain) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready
And if I try to add my account to Gmail here's what I get:
"Missing +OK response upon connecting to the server: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN] Dovecot (Ubuntu) ready."
Why does it say a self-signed cert?