search for: mizuki

On 06/12/2019 20:54, Aki Tuomi via dovecot wrote: > Hi! > > It seems there is a bug in the oauth2 driver, it loads the cert files wrong way. I'll make an internal bug report of this. Tracking as DOP-1590. Regards, Stephan. >> On 06/12/2019 16:42 mizuki <mizuki0621 at gmail.com> wrote: >> >> >> Hi, >> >> For troubleshooting purposes, I change the read/write permissions on the certs and confirmed 'dovecot' can read them w/o problem, but still seeing the same errors. :( >> Mizuki >> >> &g...

...= true tls_ca_cert_file = /etc/pki/CA/certs/incommon-rsa-server-ca.crt tls_cert_file = /etc/pki/dovecot/certs/dovecot.pem tls_key_file = /etc/pki/dovecot/private/dovecot.pem --------------- The debug log is showing now slightly different msg ex: Dec 5 21:09:59 mktst4 dovecot: auth: Error: oauth2(mizuki,10.0.2.1,<29b4iv+YKuuCx5Tr>): oauth2 failed: Couldn't initialize SSL context: Can't load SSL certificate: There is no valid PEM certificate. Still not able to connect to the keyclaok server. :( PS: Dovecot & Keycloak severs are both using the same legit cert/key pair with CA fi...

Thank you Stephan, I'm wondering if I can read the track of the status of bug reports? Could you please advice? Thanks. Mizuki On Sun, Dec 8, 2019 at 6:40 AM Stephan Bosch <stephan at rename-it.nl> wrote: > > > On 06/12/2019 20:54, Aki Tuomi via dovecot wrote: > > Hi! > > > > It seems there is a bug in the oauth2 driver, it loads the cert files > wrong way. I'll make an internal bu...

Hi! It seems there is a bug in the oauth2 driver, it loads the cert files wrong way. I'll make an internal bug report of this. Aki > On 06/12/2019 16:42 mizuki <mizuki0621 at gmail.com> wrote: > > > Hi, > > For troubleshooting purposes, I change the read/write permissions on the certs and confirmed 'dovecot' can read them w/o problem, but still seeing the same errors. :( > Mizuki > > > On Fri, Dec 6, 2019 at 1...

...39; } } This creates the file fine, but the service won''t get restarted. Notify service outside of exported resource works of course. So I''m wondering if it''s designed by nature or it''s just a bug. Anyone had experinces on that? Can someone advice? Thanks! Mizuki -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this gr...

...WM-byvrnNAr6acYmbmtZW4aWCpNNEHtYSoKJh2tvnB8G6yyyjmYbyCfaNl0JuYaNvTQ3MxB_ag-_Os-8VL-LaKtpFapL4EMYBZ_1gfcaHWTIEuU-0IWcN9DklqqmL7_c6Q ] Dec 5 14:32:22 mktst4 dovecot: auth: Debug: http-client: host example.com: Host is idle (timeout = 1799992 msecs) Dec 5 14:32:22 mktst4 dovecot: auth: Error: oauth2(mizuki,10.0.2.1,<QPwA/fmY+tqCx5Tr>): oauth2 failed: SSL handshaking with 10.0.2.2:443 failed: read(SSL 10.0.2.2:443) failed: Received invalid SSL certificate: unable to get issuer certificate: /C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust RSA Certification Authority Dec 5 1...

Before declaring it not ready for prime time, did you try setting tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt In the oauth2 configuration file as documented in https://doc.dovecot.org/configuration_manual/authentication/oauth2 ? Aki > On 05/12/2019 21:58 mizuki via dovecot <dovecot at dovecot.org> wrote: > > > Hi all, > > We'd like to enable OAuth with Keycloak in Dovecot, after enabling 'OAUTHBEARER XOAUTH2' in Dovecot based on online document, I can confirm Dovecot is ready for OAuth using openssl command, however whe...

...w). > > > > My problem looks like this one: > > https://dovecot.org/pipermail/dovecot/2019-December/117768.html > > The response to this problem was about a bug in oauth driver > > (https://dovecot.org/pipermail/dovecot/2019-December/117787.html). > > > > Mizuki was using Dovecot v2.2.36 (1f10bfa63) > > I have Dovecot Dovecot v2.3.4.1 (f79e8e7e4) > > > > I'm wondering if this bug is still present in my version or if I have > > another problem. > > > > Both my servers (dovecot and keycloak) are using let's encry...

...ccurs when dovecot tries to contact the keycloak server (logs are below). My problem looks like this one: https://dovecot.org/pipermail/dovecot/2019-December/117768.html The response to this problem was about a bug in oauth driver (https://dovecot.org/pipermail/dovecot/2019-December/117787.html). Mizuki was using Dovecot v2.2.36 (1f10bfa63) I have Dovecot Dovecot v2.3.4.1 (f79e8e7e4) I'm wondering if this bug is still present in my version or if I have another problem. Both my servers (dovecot and keycloak) are using let's encrypt certificates. I tried to configure Keycloak with nginx pr...

...y IMAP client software alternative to Thunderbird who can handle OAuth2 other than using gmail, yahoo etc (ex, talk to local auth provider)? Thunderbird does not seem to support well at the time being so I'm wondering what other choices we may have for our user communities. Thank you very much. Mizuki -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20191210/3357f9de/attachment.html>

...keycloak server > (logs are below). > > My problem looks like this one: > https://dovecot.org/pipermail/dovecot/2019-December/117768.html > The response to this problem was about a bug in oauth driver > (https://dovecot.org/pipermail/dovecot/2019-December/117787.html). > > Mizuki was using Dovecot v2.2.36 (1f10bfa63) > I have Dovecot Dovecot v2.3.4.1 (f79e8e7e4) > > I'm wondering if this bug is still present in my version or if I have > another problem. > > Both my servers (dovecot and keycloak) are using let's encrypt certificates. > I tried...

...t;>> My problem looks like this one: >>> https://dovecot.org/pipermail/dovecot/2019-December/117768.html >>> The response to this problem was about a bug in oauth driver >>> (https://dovecot.org/pipermail/dovecot/2019-December/117787.html). >>> >>> Mizuki was using Dovecot v2.2.36 (1f10bfa63) >>> I have Dovecot Dovecot v2.3.4.1 (f79e8e7e4) >>> >>> I'm wondering if this bug is still present in my version or if I have >>> another problem. >>> >>> Both my servers (dovecot and keycloak) are using...