dovecot - Oct 2014 - Corrupted SSL parameters file in state_dir with HG 267bca7a62fb

Hi,

with the latest HG 267bca7a62fb the following error started to appear in the
logs:

Oct 31 09:39:07 nihlus dovecot: master: Dovecot v2.2.15 (267bca7a62fb) starting
up for imap, lmtp
[...]
Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Corrupted SSL parameters
file in state_dir: ssl-parameters.dat - disabling SSL 360
Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Couldn't initialize SSL
parameters, disabling SSL
Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Connect from local

This most likely has been introduced with a commit after the previous build
installed (aa5dde56424f). I did not find options to disable SSL for LMTP either,
as in my setup I'm using a UNIX socket.

Regards
Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20141031/589adb65/attachment.sig>

On 10/31/2014 12:13 PM, Thomas Leuxner wrote:
> Hi,
> 
> with the latest HG 267bca7a62fb the following error started to appear in
the logs:
> 
> Oct 31 09:39:07 nihlus dovecot: master: Dovecot v2.2.15 (267bca7a62fb)
starting up for imap, lmtp
> [...]
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Corrupted SSL
parameters file in state_dir: ssl-parameters.dat - disabling SSL 360
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Couldn't initialize
SSL parameters, disabling SSL
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Connect from local
> 
> This most likely has been introduced with a commit after the previous build
installed (aa5dde56424f). I did not find options to disable SSL for LMTP either,
as in my setup I'm using a UNIX socket.
There seems to be an issue with setting a non-default, e.g. 2048, value for
ssl_dh_parameters_length. A work around is to revert
to the default 1024.

Teemu

On 31 Oct 2014, at 03:13, Thomas Leuxner <tlx at leuxner.net> wrote:
> with the latest HG 267bca7a62fb the following error started to appear in
the logs:
> 
> Oct 31 09:39:07 nihlus dovecot: master: Dovecot v2.2.15 (267bca7a62fb)
starting up for imap, lmtp
> [...]
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Corrupted SSL
parameters file in state_dir: ssl-parameters.dat - disabling SSL 360
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Error: Couldn't initialize
SSL parameters, disabling SSL
> Oct 31 10:10:52 nihlus dovecot: lmtp(20876): Connect from local
> 
> This most likely has been introduced with a commit after the previous build
installed (aa5dde56424f). I did not find options to disable SSL for LMTP either,
as in my setup I'm using a UNIX socket.
Fixed: http://hg.dovecot.org/dovecot-2.2/rev/6efd7ab25b71