The Dovecot SSL cipher suite is really strict and programs such as node.js with the default ciphers are unable to connect using TLS.
The only way to connect is to use DES-CBC3-SHA which is not secure (BEAST attack).
Those are the default nodejs ciphers:
ECDHE-RSA-AES128-GCM-SHA256:
ECDHE-ECDSA-AES128-GCM-SHA256:
ECDHE-RSA-AES256-GCM-SHA384:
ECDHE-ECDSA-AES256-GCM-SHA384:
DHE-RSA-AES128-GCM-SHA256:
ECDHE-RSA-AES128-SHA256:
DHE-RSA-AES128-SHA256:
ECDHE-RSA-AES256-SHA384:
DHE-RSA-AES256-SHA384:
ECDHE-RSA-AES256-SHA256:
DHE-RSA-AES256-SHA256:
HIGH:
!aNULL:
!eNULL:
!EXPORT:
!DES:
!RC4:
!MD5:
!PSK:
!SRP:
!CAMELLIA
The Dovecot SSL cipher suite is really strict and programs such as node.js with the default ciphers are unable to connect using TLS.
The only way to connect is to use
DES-CBC3-SHAwhich is not secure (BEAST attack).Those are the default nodejs ciphers: