search for: ssl_key

...ith at gmx.net: >> >> #### BUT #### >> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf >> >> local imap.mydomain01.tld { >> protocol imap { >> ssl_cert = >> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem >> ssl_key = >> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem >> } >> } >> >> local imap.mydomain02.tld { >> protocol imap { >> ssl_cert = >> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.crt.pem >> ssl_key = >...

...ows no deniead messages > >> ### This works (Thunderbird, Outlook 2013, Opera Mail ect.) #### >> >> local mydomain01.tld { >> >> protocol imap { >> ssl_cert = >> </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem >> ssl_key = >> </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem >> } >> >> } >> Sorry the above has some typo errors, forget it. Ok, this works well: Configfile: /etc/dovecot/conf.d/10-ssl.conf protocol imap { ssl_cert = </etc/ssl/domains/mydomain01.tl...

...update I get some warnings: doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 12: Global setting ssl_cert won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 4 doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 13: Global setting ssl_key won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.conf line 5 doveconf: Warning: /etc/dovecot/conf.d/10-ssl.conf line 12: Global setting ssl_cert won't change the setting inside an earlier filter at /etc/dovecot/conf.d/10-ssl-langzeittest.de.con...

...aillog *dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled) ### This works (Thunderbird, Outlook 2013, Opera Mail ect.) #### local mydomain01.tld { protocol imap { ssl_cert = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem ssl_key = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem } } ### this 10-ssl.conf ### --- FAILS (the error occurs after an email client accesses IMAP Folders) local mydomain01.tld { protocol imap { ssl_cert = </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld....

Am 15.08.2015 um 08:16 schrieb Christian Kivalo: > [snip] > > Note that you will still need a top-level "default" ssl_key and ssl_cert as well, or you will receive errors. > > in addition to your two domain specific ssl certs have you also defined a "default" ssl_key and ssl_cert as required as required by the documentation? > > regards > - c Did you really read the wiki and thadt i allready...

Hello, It seems that Dovecot ignores the new /ssl_cert and ssl_key /settings. Using them in the dovecot configuration results in the error: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY] Using the old /ssl_//cert//_file/ and /ssl_key_file/ results in their being obsolete warning bu...

...;> #### BUT #### >>> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf >>> >>> local imap.mydomain01.tld { >>> protocol imap { >>> ssl_cert = >>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem >>> ssl_key = >>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem >>> } >>> } >>> >>> local imap.mydomain02.tld { >>> protocol imap { >>> ssl_cert = >>> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.c...

...or SSL with valid key/certs, if you have a self signed or no CERT at all, it starts connection warnings and errors on the client side. So is there any way possible to turn off advertising of TLS on port or turn it off/on per IP? Something like: ssl = yes ssl_cert = </etc/ssl/cert/default.pem ssl_key = </etc/ssl/cert/default.pem local 10.1.1.1 { protocol imap { ssl_cert = </etc/ssl/cert/site1.pem ssl_key = </etc/ssl/cert/site1.pem } protocol pop3 { ssl_cert = </etc/ssl/cert/site1.pem ssl_key = </etc/ssl/cert/site1.pem } } local 10.1.1.2 { ssl...

After upgrading to 2.31 I'm getting this error. Not sure what I'm doing wrong. No (No signatures could be verified because the chain contains only one certificate and it is not self signed.) ssl = yes ssl_cert = </etc/exim/certs/ctyme.com.crt ssl_key = </etc/exim/certs/ctyme.com.key ssl_ca = </etc/exim/certs/ca.crt local mail.ctyme.com { ? protocol imap { ??? ssl_cert = </etc/exim/certs/ctyme.com.crt ??? ssl_key = </etc/exim/certs/ctyme.com.key ??? ssl_ca = </etc/exim/certs/ca.crt ? } ? protocol pop3 { ??? ssl_cert = &l...

...ation from dovecot's wiki page, to have multiple domains. I'm using letsencrypt certificates. On the 10-ssl.conf, when I only use one domain, like this, it works : ssl_ca = </etc/letsencrypt/live/mail.mydomain.fr/chain.pem ssl_cert = </etc/letsencrypt/live/mail.mydomain.fr/cert.pem ssl_key = </etc/letsencrypt/live/mail.mydomain.fr/privkey.pem I got a warning of course when using my second domain, mydomain2.fr. If I do the config : local_name mail.mydomain.fr { ssl_ca = </etc/letsencrypt/live/mail.mydomain.fr/chain.pem ssl_cert = </etc/letsencrypt/live/mail.mydomain.fr/cer...

Hello, If you don?t have a ssl_key and ssl_cert configured in your dovecot config managesieve-login will fail to start with the following error message: dovecot: managesieve-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY, even if you haven?t enabl...

...pop3s gives a 'Verify return code: 0 (ok)' I can't imagine this sni support is not available in recent versions. Should I remove this default certificate in the main section of 10-ssl.conf? These lines I have added to 10-ssl.conf ssl_cert = </etc/pki/tls/certs/mail-wildcard.crt ssl_key = </etc/pki/tls/private/mail-wildcard.key local 192.168.10.43 { ssl_key = </etc/pki/tls/private/xxxxxxx.local.key ssl_cert = </etc/pki/tls/certs/xxxxxxx.local.crt } local_name mail.xxxxx.com { ssl_key = </etc/pki/tls/private/mail.xxxxx.com.key ssl_cert = </etc/pki/tls/cert...

...ting up for imap, pop3, lmtp (core > dumps disabled) > > ### This works (Thunderbird, Outlook 2013, Opera Mail ect.) #### > > local mydomain01.tld { > > protocol imap { > ssl_cert = > </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.crt.pem > ssl_key = > </etc/ssl/domains/mydomain.tld/imap/imap.mydomain02.tld.key.pem > } > > } You are leaving the terrain of your distribution. That's not the intended path. /etc/pki/tls/{certs,private}/ is. > ### this 10-ssl.conf ### --- FAILS (the error occurs after an email > clie...

...t; #### BUT #### >> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf >> local_name imap.mydomain01.tld >> local imap.mydomain01.tld { >> protocol imap { >> ssl_cert = >> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem >> ssl_key = >> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem >> } >> } >> local_name imap.mydomain02.tld >> local imap.mydomain02.tld { >> protocol imap { >> ssl_cert = >> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.cr...

....08.2015 um 03:22 schrieb dravion.smith at gmx.net: > > #### BUT #### > If i try something like this in /etc/dovecot/conf.d/10-ssl.conf > > local imap.mydomain01.tld { > protocol imap { > ssl_cert = > </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem > ssl_key = > </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem > } > } > > local imap.mydomain02.tld { > protocol imap { > ssl_cert = > </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.crt.pem > ssl_key = > </etc/ssl/domains/mydomain02.tld...

Am 15. August 2015 08:58:04 MESZ, schrieb "dravion.smith at gmx.net" <dravion.smith at gmx.net>: > >Am 15.08.2015 um 08:16 schrieb Christian Kivalo: > >> [snip] >> >> Note that you will still need a top-level "default" ssl_key and >ssl_cert as well, or you will receive errors. >> >> in addition to your two domain specific ssl certs have you also >defined a "default" ssl_key and ssl_cert as required as required by the >documentation? >> >> regards >> - c > >Did you re...

Am 15.08.2015 um 09:04 schrieb Christian Kivalo: > provide your multi ssl doveconf -n output. - c No. I leave this shit alone and running dovecot in multiinstance mode and now its works.

...service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/ssl/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = username_format=%n /etc/mail/users default_fields = quota_rule=*:storage=1G driver = passwd-file } protocol lmtp { mail_plugins = } protocol imap { mail_max_userip_connections = 10 mail_plugins = } protocol lda { mail_plugins =...

>But can you explain why you use globally: > >ssl_cert = </etc/ssl/dovecot.pem >ssl_key = </etc/ssl/private/dovecot.pem > >and certs for any additional Domain each? > >## >local_name mail.pettijohn-web.com { > ssl_cert = </etc/ssl/mail.pettijohn-web.com.crt > ssl_key = </etc/ssl/private/mail.pettijohn-web.com.key >} >## he configured the top le...

...ot2/libexec/dovecot/pop3 process_limit = 250000 } service replicator { unix_listener replicator-doveadm { mode = 0600 user = popuser } } service stats { fifo_listener stats-mail { mode = 0600 user = popuser } } ssl_cert = </usr/local/dovecot2/etc/dovecot/certs/cert1.crt ssl_key = </usr/local/dovecot2/etc/dovecot/certs/cert1.key ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 !SSLv2 userdb { args = /usr/local/dovecot2/etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_proctitle = yes protocol doveadm { mail_plugin_dir = /usr/local/dovecot2/lib/dovecot/ mail_plug...