SSL Handshake Failure during Client Certificate Verification in Dovecot
A Dovecot configuration requires mutual TLS (mTLS) to authenticate clients via certificates. While the ssl = yes and ssl_cert directives are configured for the server identity, the system must also validate the incoming client certificates against a trusted root. The current uncertainty involves the behavior of the ssl_ca directive when managing a complex tr