dovecot - May 2017 - 10-ssl.conf: Unknown setting: ssl / debian 1:2.2.13-12~deb8u

Hi,


I've been trying to get dovecot2 running and kept having this error message:

May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email server.
May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl


# dovecot --build-options
Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192
Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail
SQL driver plugins: mysql postgresql sqlite
Passdb: checkpassword ldap pam passwd passwd-file shadow sql
Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql

# openssl version
OpenSSL 1.0.1t  3 May 2016

This package is from from Debian repos with version number 1:2.2.13-12~deb8u
amd64

In case I had inadvertently entered some invisible charaters in 10-ssl.conf, I
deleted and typed this out. Not copy-pasted:
# >10-ssl.conf
# cat 10-ssl.conf
# echo 'ssl = required' >10-ssl.conf
# echo 'ssl_key  = </etc/ssl/private/xxx.key' >>10-ssl.conf
# echo 'ssl_cert = </etc/ssl/private/xxx.pem' >>10-ssl.conf

I?ve done usual searching online for a week and read some dox, but cannot see
what I?ve missed out.
 Any ideas? Please?

Thanks,
Sophie

Hi Sophie

did you try the following steps?

1. rename /etc/dovecot/conf.d/10-ssl.conf to
/etc/dovecot/conf.d/10-ssl.conf.bak
2. copy /usr/share/dovecot/conf.d/10-ssl.conf to /etc/dovecot/conf.d/
3. restart dovecot

what happens? start dovecot normally?

if so

make a new cert with /usr/share/dovecot/mkcert.sh

and do changes in /etc/dovecot/conf.d/10-ssl.conf

ssl = yes
ssl_cert = </etc/dovecot/dovecot.pem
ssl_key = </etc/dovecot/private/dovecot.pem

then restart dovecot. What happens now?


Best regards
Stefan


Am 18.05.2017 um 22:01 schrieb Sophie Loewenthal:
> Hi,
> 
> 
> I've been trying to get dovecot2 running and kept having this error
message:
> 
> May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email server.
> May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in configuration
file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl
> 
> 
> # dovecot --build-options
> Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192
> Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail
> SQL driver plugins: mysql postgresql sqlite
> Passdb: checkpassword ldap pam passwd passwd-file shadow sql
> Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql
> 
> # openssl version
> OpenSSL 1.0.1t  3 May 2016
> 
> This package is from from Debian repos with version number
1:2.2.13-12~deb8u amd64
> 
> In case I had inadvertently entered some invisible charaters in
10-ssl.conf, I deleted and typed this out. Not copy-pasted:
> # >10-ssl.conf
> # cat 10-ssl.conf
> # echo 'ssl = required' >10-ssl.conf
> # echo 'ssl_key  = </etc/ssl/private/xxx.key'
>>10-ssl.conf
> # echo 'ssl_cert = </etc/ssl/private/xxx.pem'
>>10-ssl.conf
> 
> I?ve done usual searching online for a week and read some dox, but cannot
see what I?ve missed out.
>  Any ideas? Please?
> 
> Thanks,
> Sophie 
>

Hi Stefan, 

My apologies for the long delay.  Been ill. 

I tried this and had an error,


# mv /etc/dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/10-ssl.conf.bak
# cp -p  /usr/share/dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/
# /etc/init.d/dovecot restart

/var/log/daemon.log
Jun  4 11:05:55 mail systemd[1]: Starting Dovecot IMAP/POP3 email server...
Jun  4 11:05:55 mail systemd[1]: Started Dovecot IMAP/POP3 email server.
Jun  4 11:05:55 mail dovecot[969]: doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-ssl.conf line 6: Unknown setting: ssl
Jun  4 11:05:55 mail dovecot[969]: doveconf: Error: managesieve-login:
dump-capability process returned 89
Jun  4 11:05:55 mail dovecot[969]: doveconf: Fatal: Error in configuration file
/etc/dovecot/conf.d/10-ssl.conf line 6: Unknown setting: ssl
Jun  4 11:05:55 mail systemd[1]: dovecot.service: main process exited,
code=exited, status=89/n/a
Jun  4 11:05:55 mail systemd[1]: Unit dovecot.service entered failed state.

> On 18 May 2017, at 23:40, S. Kremer <sk71 at gmx.de> wrote:
> 
> Hi Sophie
> 
> did you try the following steps?
> 
> 1. rename /etc/dovecot/conf.d/10-ssl.conf to
> /etc/dovecot/conf.d/10-ssl.conf.bak
> 2. copy /usr/share/dovecot/conf.d/10-ssl.conf to /etc/dovecot/conf.d/
> 3. restart dovecot
> 
> what happens? start dovecot normally?
> 
> if so
> 
> make a new cert with /usr/share/dovecot/mkcert.sh
> 
> and do changes in /etc/dovecot/conf.d/10-ssl.conf
> 
> ssl = yes
> ssl_cert = </etc/dovecot/dovecot.pem
> ssl_key = </etc/dovecot/private/dovecot.pem
> 
> then restart dovecot. What happens now?
> 
> 
> Best regards
> Stefan
> 
> 
> Am 18.05.2017 um 22:01 schrieb Sophie Loewenthal:
>> Hi,
>> 
>> 
>> I've been trying to get dovecot2 running and kept having this error
message:
>> 
>> May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email
server.
>> May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in
configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl
>> 
>> 
>> # dovecot --build-options
>> Build options: ioloop=epoll notify=inotify ipv6 openssl
io_block_size=8192
>> Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw
fail
>> SQL driver plugins: mysql postgresql sqlite
>> Passdb: checkpassword ldap pam passwd passwd-file shadow sql
>> Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql
>> 
>> # openssl version
>> OpenSSL 1.0.1t  3 May 2016
>> 
>> This package is from from Debian repos with version number
1:2.2.13-12~deb8u amd64
>> 
>> In case I had inadvertently entered some invisible charaters in
10-ssl.conf, I deleted and typed this out. Not copy-pasted:
>> # >10-ssl.conf
>> # cat 10-ssl.conf
>> # echo 'ssl = required' >10-ssl.conf
>> # echo 'ssl_key  = </etc/ssl/private/xxx.key'
>>10-ssl.conf
>> # echo 'ssl_cert = </etc/ssl/private/xxx.pem'
>>10-ssl.conf
>> 
>> I?ve done usual searching online for a week and read some dox, but
cannot see what I?ve missed out.
>> Any ideas? Please?
>> 
>> Thanks,
>> Sophie 
>>