dovecot - Aug 2021 - Odd config problem in Debian Bullseye / dovecot 2.3.13

Hi all!

For a long time, I've been running this out of cron as user
"perry":

/usr/bin/doveadm expunge -u perry mailbox SPAM not seen before 7d

After upgrading to 2.3.13 as a result of a debian upgrade, this broke. I 
now am suddenly getting:

doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf 
line 132: ssl_key: Can't open file 
/etc/ssl/private/ssl-cert-snakeoil.key: Permission denied

Attempting things like setting "-o ssl_key=/dev/null" and the like
don't
work.

I could of course run this as root but I'd strongly prefer not to.

Anyone have any ideas?

Perry

> On 18/08/2021 19:21 Perry E. Metzger <perry at piermont.com> wrote:
> 
>  
> Hi all!
> 
> For a long time, I've been running this out of cron as user
"perry":
> 
> /usr/bin/doveadm expunge -u perry mailbox SPAM not seen before 7d
> 
> After upgrading to 2.3.13 as a result of a debian upgrade, this broke. I 
> now am suddenly getting:
> 
> doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf 
> line 132: ssl_key: Can't open file 
> /etc/ssl/private/ssl-cert-snakeoil.key: Permission denied
> 
> Attempting things like setting "-o ssl_key=/dev/null" and the
like don't
> work.
> 
> I could of course run this as root but I'd strongly prefer not to.
> 
> Anyone have any ideas?
> 
> Perry

Hi!

this is a known issue, you can workaround it for now with

ssl=no
!try_include /etc/dovecot/ssl.conf

then put in /etc/dovecot/ssl.conf

ssl=yes
ssl_cert=<...
ssl_key=<...

etc.

and chmod 0400 /etc/dovecot/ssl.conf

Aki