Repeating "ECChannel::HrEnableTLS(): SSL_accept failed:" in gateway.log

[nickh]

In my gateway log I am seeing:

Fri Dec 20 15:55:22 2019: [error  ] ECChannel::HrEnableTLS(): SSL_accept failed: 1
Fri Dec 20 15:55:22 2019: [error  ] Unable to negotiate SSL connection

The error repeats around 6 times a second. But Kopano appears to be running OK. I was on 8.5.8 and have just upgraded to 8.7.5 with no change.

From everything else I’ve seen, my gateway certificates are owned by root:ssl-cert and the kopano user is a member of ssl-cert. If I su to the kopano user I can cat the certificate and key.

Do you know what is causing it and how I can fix it?

[jengelh]

I would guess KC-1397, fixed in 8.7.8/9.0.1.

[modelnine]

Possibly it’s also this: https://forum.kopano.io/topic/2886/ssl-negotiation-failures-with-tlsv1-and-tlsv1-3-against-gateway-ical-on-debian-10 - i.e. clients which try to do TLSv1, but the server not allowing them.