search for: ecprivkey

...rder to generate an EC key, you must first choose a curve from the > output of this command: > > openssl ecparam -list_curves > > If you choose the curve prime256v1, generate and EC key with the command: > > openssl ecparam -name prime256v1 -genkey | openssl pkey -out > ecprivkey.pem > > Then generate a public key out of your private EC key > > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem > " > > -Dave I'm going on a limb and guess that there is something strange happening with ruby and openssl versions here. The main point of...

>> I've tried specifying an output file as well, per the script's command line options, >> but the output file is 0 bytes.? Does anyone have any suggestions?? I *think* I'm >> using it the way it's intended to be used, but maybe I'm not?! >> -Dave > > Hi! > Maybe the key you tried was not used to encrypt the file? > Aki Aki,

> On 11 April 2019 00:49 David Salisbury via dovecot <dovecot at dovecot.org> wrote: > > > >>> > >> Yes. I gave it a try here, and it seems to work. Does it give any extra > >> information if you include -i flag? > >> > >> Aki > >> > > > > Yes, I had tried that, and it doesn't give much extra information, at

...2 root root 4096 ??? 13 12:42 eckey2 drwxr-xr-x 2 vmail vmail 4096 ??? 11 09:14 RSAkey [root at mail44 dovecot]# cd eckey2 [root at mail44 eckey2]# ls -la ????? 16 drwxr-xr-x 2 root root 4096 ??? 13 12:42 . drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem ----- ???????? ????????? ----- > ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> > ????: "dovecot" <dovecot at dovecot.org> > ????????????: ???????, 13 ?????? 2017 ? 14:18:55 > ????: Re: Plugin "ma...

...Plugins/MailCrypt " In order to generate an EC key, you must first choose a curve from the output of this command: > openssl ecparam -list_curves If you choose the curve prime256v1, generate and EC key with the command: > openssl ecparam -name prime256v1 -genkey | openssl pkey -out ecprivkey.pem Then generate a public key out of your private EC key > openssl pkey -in ecprivkey.pem -pubout -out ecpubkey.pem " -Dave

Dovecot version: 2.2.22 (fe789d2) I generated an EC key from the page https://wiki2.dovecot.org/Plugins/. For reference here's my /etc/dovecot/conf.d/10-mail-crypt.conf file: ---- mail_plugins = $mail_plugins mail_crypt plugin { # mail_crypt_global_private_key = </etc/dovecot/ecprivkey.pem mail_crypt_global_public_key = </etc/dovecot/ecpubkey.pem mail_crypt_save_version = 2 } ---- I saw in a previous message on this mailing list that messages can be encrypted without the private key, so it's stored elsewhere. :-) After restarting dovecot and sending myself a mes...

...t all incoming and outgoing emails. Outgoing emails seem to get encrypted fine but the incoming ones don't. We tried everything including this config: mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 } also this one: plugin { mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 } but to no avail. There are no visible errors, Dovecot restarts fine and outgoing emails get encrypted. Any ideas?...

...separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = prime256v1 mail_crypt_global_private_key = </etc/dovecot/eckey/ecprivkey.pem mail_crypt_global_public_key = </etc/dovecot/eckey/ecpubkey.pem mail_crypt_save_version = 2 recipient_delimiter = + sieve = /etc/dovecot/sieves/default.sieve sieve_default = /etc/dovecot/sieves/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_...

...mail 4096 ??? 11 09:14 RSAkey >> >> [root at mail44 dovecot]# cd eckey2 >> [root at mail44 eckey2]# ls -la >> ????? 16 >> drwxr-xr-x 2 root root 4096 ??? 13 12:42 . >> drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. >> -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem >> -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem >> >> ----- ???????? ????????? ----- >>> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> >>> ????: "dovecot" <dovecot at dovecot.org> >>> ????????????: ???????, 13 ??...

...2 > drwxr-xr-x 2 vmail vmail 4096 ??? 11 09:14 RSAkey > > [root at mail44 dovecot]# cd eckey2 > [root at mail44 eckey2]# ls -la > ????? 16 > drwxr-xr-x 2 root root 4096 ??? 13 12:42 . > drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. > -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem > -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem > > ----- ???????? ????????? ----- >> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> >> ????: "dovecot" <dovecot at dovecot.org> >> ????????????: ???????, 13 ?????? 2017 ? 14:18:55 &gt...

...t all incoming and outgoing emails. Outgoing emails seem to get encrypted fine but the incoming ones don't. We tried everything including this config: mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_plugins = $mail_plugins mail_crypt plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 } also this one: plugin { mail_crypt_curve = prime256v1 mail_crypt_save_version = 2 } but to no avail. There are no visible errors, Dovecot restarts fine and outgoing emails get encrypted. Any ideas? -...

...ox = yes location = mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = create special_use = \Sent } prefix = INBOX. separator = . type = private } passdb { driver = plesk } plugin { mail_crypt_global_private_key = <ecprivkey.pem mail_crypt_global_public_key = <ecpubkey.pem mail_crypt_save_version = 2 quota = maildir:User quota quota_grace = 0 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = rcvd...

...>> > >> [root at mail44 dovecot]# cd eckey2 > >> [root at mail44 eckey2]# ls -la > >> ????? 16 > >> drwxr-xr-x 2 root root 4096 ??? 13 12:42 . > >> drwxr-xr-x 8 root root 4096 ??? 13 13:17 .. > >> -rw-r--r-- 1 root root 316 ??? 13 12:41 ecprivkey.pem > >> -rw-r--r-- 1 root root 232 ??? 13 12:42 ecpubkey.pem > >> > >> ----- ???????? ????????? ----- > >>> ??: "Aki Tuomi" <aki.tuomi at dovecot.fi> > >>> ????: "dovecot" <dovecot at dovecot.org> > >>&gt...

I did some more digging around and found this is reproducible on multiple hosts running the same version of Dovecot/Pigeonhole/Postfix. The problem resurfaces on any host to an account with enabled Vacation/OOO response. The Vacation/OOO reply filter was created in Roundcubemail, but has been fine for years. One thing to note is in Dovecot 2.3.0 I did enable UTF8, but even if I disable UTF8