search for: ssl_parameters_fil

Hello Timo, What was the reason to remove ssl_parameters_file setting? Is it possible to restore it? We really need it, and I can see no reason to remove this useful setting. -- Sergey Redin

...missions to read this file, however, I followed all the instructions to run as a rootless user. I don't seem to be able to specify anywhere where this ssl- parameters file should be copied from. Please note, I'm running this as user daniel (not root). Btw, there seems to have been a ssl_parameters_file keyword in the past, but it doesn't work with my version (nor with the latest 1.0.13). non-SSL IMAP works fine, but obviously SSL has issues. Thank you in advance for any help, Daniel #### SYSTEM INFO ##################################### $ dovecot --version 1.0.rc15 $ uname -a Linux m...

...uot;2002-12-17 03:00 Timo Sirainen <tss at iki.fi>") but for some reason it's broken again..? The configure args problem has to do with --localstatedir. If i leave it default (PREFIX/var) it forces me (even with non-relative pathnames in the config file) for the socket-files (ssl_parameters_file, login_dir) that should go in /var/run to be put under PREFIX, (/usr/local for NetBSD 1.6). Not too bad, if I could override it in the config file, which I can't. So I ./configure'd with --localstatedir=/, and when I run imap-master I now get: Fatal: Can't create directory //run/...

...asking for ssl, and in my conf file I have it hashed out. mail:~# cat /etc/dovecot/dovecot.conf | grep ssl # --with-ssldir=/etc/ssl #ssl_listen = #ssl_disable = no #ssl_cert_file = /etc/ssl/certs/dovecot.pem #ssl_key_file = /etc/ssl/private/dovecot.pem #ssl_ca_file = #ssl_verify_client_cert = no #ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat #ssl_parameters_regenerate = 24 #ssl_cipher_list = all:!LOW #verbose_ssl = no #ssl_require_client_cert = no mail:~# I tried on the command line # dovecot -F -c dovecot.conf my version is: mail:~# dovecot --version 1.0.alpha3 mail:~# Would anyone perhaps...

Hi, I use dovecot (pop) with gentoo but it's not securize. I would like to use pops but i don't how to do this. I think i have to use certificates... This my dovecot.conf : protocols = imap imaps pop3 pop3s imap_listen = * pop3_listen = * imaps_listen = * pop3s_listen = * ssl_disable = no login = imap login = pop3 default_mail_env = maildir:%h/.maildir mbox_locks = fcntl dotlock auth =

...p for DSA use: ssl_key_file = /var/Security/mail.testdomain.com.privkey.dsa.pem ssl_cert_file = /var/Security/mail.testdomain.com.cert.dsa.pem ssl_ca_file = /var/Security/MyCertificateAuthority.CA.cert.dsa.pem ssl_verify_client_cert = no ssl_parameters_file = /var/Security/dsaparam.pem ssl_parameters_regenerate = 0 an attempt @ dovecot launch results in a logged error of: dovecot: Sep 11 11:58:43 Error: imap-login: Can't load private key file /var/Security/mail.testdomain.com.privkey.dsa.pem: error:0607907F:digital envelope rout...

I am using Thunderbird 2.x as my client, Dovecot on the server (POP3 not IMAP). Currently I have in my conf file: protocols = pop3s pop3 ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat disable_plaintext_auth = yes login = pop3 In Thunderbird, I have the email server setup to: - Port 110 - TLS Here's my question: If I change protocols = pop3s pop3 to protocols = pop3s I can no longer connect to my mail server via Thunderbird unle...

...such file or directory child 12922 (auth) returned error 89 ----------------------------------------- dovecot.conf ----------------------------------------- base_dir = /var/dovecot/ protocols = imap imaps pop3 pop3s ssl_cert_file = /etc/ssl/certs/mail.crt ssl_key_file = /etc/ssl/private/mail.key ssl_parameters_file = /var/dovecot/ssl-parameters.dat disable_plaintext_auth = no login_dir = /var/dovecot/login login_user = _dovecot login_processes_count = 1 valid_chroot_dirs = /var/spool/postfix/var/mail mail_debug = yes default_mail_env = maildir:%h mmap_no_write = yes protocol imap { } protocol pop3 { } auth_v...

...is also running httpd, squirrelmail, php5, postfix, clamd, clamsmtpd, sshd.) Here's my /etc/dovecot.conf now: # protocols = imap pop3 imap_listen = * pop3_listen = my.servers.ip.address (hidden for this list) ssl_cert_file = /etc/ssl/certs/imapd.pem ssl_key_file = /etc/ssl/private/imapd.pem ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat ssl_parameters_regenerate = 320 login_dir = /var/run/dovecot-login login = imap login = pop3 default_mail_env = maildir:/home/%u/Maildir mailbox_idle_check_interval = 40 mail_full_filesystem_access = yes login_user = dovecot login_process_size = 64 login_proc...

Hi all, I am new to dovecot and squirrelmail and I am trying to configure squirrelmail with dovecot as its imap server. When i disable "Secure Imap (TLS)" option (2-A-7) from squirrelmail configure menu, it's working fine. But when i try to enable tls support, squirrelmail is giving the following error: Warning: fsockopen(): unable to connect to 192.xx.xx.xx:993 in

...onfig, but the server does not report STARTTLS capability. TLS is probably not supported. Lines of ssl in /etc/dovecot.conf protocols = imaps pop3s imaps_listen = * pop3s_listen = * ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat disable_plaintext_auth = yes If i do telnet localhost 993 or 995 I don't see any "Ok Dovecot Ready" message.But If I enable pop3 and imap in dovecot.conf and then I telnet localhost 110 or 143 I can see "Ok Dovecot Ready" message. How...

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: dovecot.conf Type: application/octet-stream Size: 20440 bytes Desc: not available Url : http://dovecot.org/pipermail/dovecot/attachments/20051214/c3493d0b/dovecot-0001.obj

.../raid/mail/someuser/cur/1078865114.V416I137502.mail.example.com:2,ST) failed: Permission denied -------------- next part -------------- base_dir = /var/dovecot/ protocols = imap imaps ssl_disable = no ssl_cert_file = /var/dovecot/ssl/certs/imapd.pem ssl_key_file = /var/dovecot/ssl/private/imapd.pem ssl_parameters_file = /var/dovecot/ssl/parameters.dat disable_plaintext_auth = no login_dir = /var/dovecot/login login_chroot = yes login = imap login_executable = /usr/local/libexec/dovecot/imap-login login_user = dovecot login = pop3 login_executable = /usr/local/libexec/dovecot/pop3-login verbose_proctitle = yes v...

...= } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = driver = passwd } userdb { args = driver = passwd } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no pr...

...073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </usr/local/dovecot/dovecot2/etc/dovecot/ssl/imapd.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no syslog_facility = mail userdb { args = /usr/local/dovecot/dovecot2/etc/dovecot/conf.d/dovecot-ldap.conf.ext driver = ldap } valid_chroot_dirs = verbose_auth = no verbose_proctitle = yes verbose_ssl = no version_i...

hi there, I?m getting such a headache today, I?ve added myself to three mailing lists trying to figure this out, okay here it goes. I?ve got a Fedora Core 4 box running dovecot imap, squirrel mail, postfix, samba/winbind. I?m running winbind to authenticate against Active Directory, I?ve edited my ?/etc/pam.d/dovecot? pam module so to let my users login with there Active directory password, but

...user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </var/qmail/control/servercert.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </var/qmail/control/servercert.pem ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_verify_client_cert = no submission_host = syslog_facility = mail userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no versio...

...51615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/nginx/ssl/wildcard.domain.net_bundle.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_dh_parameters_length = 1024 ssl_key = </etc/nginx/ssl/wildcard.domain.net.key ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 0 ssl_protocols = !SSLv2 !SSLv3 ssl_verify_client_cert = no syslog_facility = mail userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no verbose_ssl = no version_ignore = no pro...

...0666 user = } user = vsz_limit = 4294967295 } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/dovecot/imap.zu-con.org.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/dovecot/imap.zu-con.org.key ssl_key_password = ssl_parameters_file = ssl-parameters.dat ssl_parameters_regenerate = 168 ssl_require_client_cert = no ssl_username_from_cert = no ssl_verify_client_cert = no syslog_facility = mail userdb { args = system_groups_user=%u blocking=yes driver = passwd } valid_chroot_dirs = verbose_auth = no verbose_proctitle = no ve...

...dovecot-openssl.cnf #ssl_cert_file = /etc/ssl/certs/dovecot.pem ssl_cert_file = /usr/lib/courier-imap/share/imapd.pem ssl_key_file = /usr/lib/courier-imap/share/imapd.pem # SSL parameter file. Master process generates this file for login processes. # It contains Diffie Hellman and RSA parameters. #ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat # How often to regenerate the SSL parameters file. Generation is quite CPU # intensive operation. The value is in hours, 0 disables regeneration # entirely. #ssl_parameters_regenerate = 24 # Disable LOGIN command and all other plaintext authentications unles...