Displaying 20 results from an estimated 1000 matches similar to: "Dovecot 2.0.rc4 not generating ssl-parameters.dat on first start"
2009 Jul 24
1
Search fails on underscores in quoted-printable
Hi folks,
currently I'm running Dovecot 1.2.1. Compiled from source on
Fedora 10 Linux 32 Bit (all patches). Clients are Pine 4.64,
Thunderbird 2.0.0.22 and Mutt 1.5.20 (using "=b" for server-side
searching).
When a message contains the text "under_score" and I let the
server search for it, Dovecot does not find it in messages
with a Content-Transfer-Encoding of
2010 Aug 08
1
Dovecot 2.0.rc4 core dumped with Alpine 2.00
Hi Timo and all others!
The current Dovecot 2.0.rc4 did really well with Mutt 1.5.20 and
Thunderbird 3.1.2, but a user with Alpine 2.00 crashed it immediately.
I'm running Fedora 13 (Linux) and compiled Dovecot 2.0.rc4 manually
like I did before with Dovecot 1.2.13. When switching from 1.2 to 2.0
I removed all those ".imap" folders with internal cache data
(didn't know for sure
2016 Sep 02
2
Dovecot 2.2.25 fails on SSL
Aki Tuomi <aki.tuomi at dovecot.fi> wrote:
>> ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so
>> linux-gate.so.1 => (0x00e8c000)
>> libcrypto.so.1.0.0 => not found
>> libssl.so.1.0.0 => not found
>> librt.so.1 => /lib/librt.so.1 (0x00be4000)
>> libc.so.6 => /lib/libc.so.6
2019 Nov 27
1
Cert for ip range?
On Wed, Nov 27, 2019 at 11:31 AM Aki Tuomi <aki.tuomi at open-xchange.com>
wrote:
>
> > On 27/11/2019 21:28 Mark Moseley via dovecot <dovecot at dovecot.org>
> wrote:
> >
> >
> > On Tue, Nov 26, 2019 at 11:22 PM Aki Tuomi via dovecot <
> dovecot at dovecot.org> wrote:
> > >
> > > On 21.11.2019 23.57, Marc Roos via dovecot
2016 Jul 03
3
Dovecot 2.2.25 fails on SSL
Dear Dovecot developers!
This problem already existed some years ago, has been fixed,
and now it's there again in Dovecot 2.2.25 (2.2.24 was fine).
I'm running CentOS 6 with a custom OpenSSL installation in /usr/local/ssl
Therefore, Dovecot is configured like this:
env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto
2015 Sep 21
0
Dovecot proxy ignores trusted root certificate store
On 2015-09-21 09:28, Alex Bulan wrote:
> The result is the same with or without "<" before the file path. With
> "<" the inode atime is updated at Dovecot startup, so the file is at
> least opened, but Dovecot still can't verify the cert.
>
> The only place in the Wiki that shows an example of ssl_client_ca_file
> is on this page, and there's
2019 Mar 16
0
ssl_dh
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
ssl_dh is required from 2.3.0-2.3.2. From 2.3.3 onwards its optional. You can rm the ssl-parameters.dat file to get rid of that warning.
</div>
<div>
<br>
</div>
<div>
Aki
</div>
<blockquote
2019 Jun 16
0
Self-signed TLS client certificates
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 16 June 2019 15:47 Marvin Gülker via dovecot <
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>> wrote:
</div>
2011 Jun 27
2
Per IP ssl certificates
I have to manage 2 different domains, with 1 ssl certificate each, but I don't
know how to configure them.
I tried this example:
"Different certificates per IP and protocol"
http://wiki2.dovecot.org/SSL/DovecotConfiguration
but I got this error:
doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf: ssl
enabled, but ssl_cert not set
I dont find any documentation
2019 May 19
1
Do we need ssl_dh_parameters_length in version 2.3
Hi, I couldn't really find documentation about ssl_dh_parameters_length
except for mention in passing on the page
https://wiki2.dovecot.org/SSL/DovecotConfiguration
For version 2.3 and above is that setting necessary? If so what are the
values I can use, is setting it high like 4096 beneficial or make any
problems for clients?
Thanks for assistance.
2019 Nov 21
2
Cert for ip range?
Is it possible to configure a network for a cert instead of an ip?
Something like this:
local 192.0.2.0 {
ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem
ssl_key = </etc/ssl/dovecot/imap-02.example.com.key.pem
}
Or
local 192.0.2.0/24 {
ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem
ssl_key = </etc/ssl/dovecot/imap-02.example.com.key.pem
}
2019 Mar 16
3
ssl_dh
https://wiki.dovecot.org/SSL/DovecotConfiguration says:
"Since v2.3.3+ Diffie-Hellman parameters have been made optional, and
you are encouraged to disable non-ECC DH algorithms completely."
and a bit later:
"From version 2.3, you must specify path to DH parameters file using
ssl_dh=</path/to/dh.pem"
So.
1. Is ssl_dh an optional or a must?
2. I've disabled ssl_dh
2005 Mar 10
1
OpenSSH 4.0p1 segfaults on keyboard-interactive login
Hi folks,
I've compiled the new OpenSSH 4.0p1 on my Linux box running
Fedora Core 2 (kernel 2.6.10) the same way as I did with 3.9p1
and all previous versions.
Key-based login works fine, but if I login from a host that
require me to enter my login password (keyboard-interactive),
then the sshd child process segfaults.
Don't know if this is specific to my system or to Linux in
general.
2020 May 25
2
How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
>From the config : auth_ssl_require_client_cert = no
GMail empty vcard ... I have no ideas . so sorry.
Coding snippets. What can I provide for you that will help?
NOTE: it is pretty much the default config from Debian.
Thank you,
On Sun, May 24, 2020 at 9:29 PM Benny Pedersen <me at junc.eu> wrote:
>
> On 2020-05-25 02:54, hanasaki at gmail.com wrote:
> > Config has
>
2010 Aug 02
1
Dovecot 2.0.rc3 doesn't compile with custom OpenSSL
Hi folks,
when building Dovecot 2.0.rc3 (never used any other 2.0.X before,
so this issue might not be new to that specific release), then
compilation fails on anything that is linked against the new
"libdovecot-login.so" library.
For example, "imap-login" fails:
/bin/sh ../../libtool --tag=CC --mode=link gcc -std=gnu99 -g -O2 -Wall -W -Wmissing-prototypes
2018 Aug 19
2
creation of ssl-parameters fails
I did that the last time one year ago, now on another machine with the
same software (Ubuntu 16.04) it fails.
openssl dhparam 4096 > /var/lib/dovecot/ssl-parameters.dat
dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam
-inform der > /etc/dovecot/dh.pem
last command fails with
681+0 records in
681+0 records out
681 bytes copied, 0,00278343 s, 245 kB/s
unable to load
2014 Nov 17
1
Different SSL certificates per IP and protocol
Hi Dovecot Users and Developers,
I am hosting the server with multiple domains.
I have setup the dovecot with the instructions from
http://wiki2.dovecot.org/SSL/DovecotConfiguration
Each domain has it's own ip address. However, when I connect via
Thunderbird or any other mail clients, the client is ONLY picking up the
top-level "default" ssl_key and ssl_cert and the
2009 Jun 26
3
SSL / TLS
I am running Postfix and Dovecot on my mail server. I am required now
to have SSL/TLS on my mail server. I did check and found out that I
have a SSL certificate with Verisign issued to my mail servers FQDN.
Now my question is when reading the Dovecot Wiki, I noticed it said
that it is not common to use SSL but rather TLS on most mail servers.
Even though SSL will work, which should I use on my
2010 Aug 29
1
Different IPs should use different ssl-certs/keys
I don't understand how to use multiple keys/certs on different IPs
without SNI.
http://wiki2.dovecot.org/SSL/DovecotConfiguration explains how to use
different keys for different protocols like POP3 and IMAP.
But how to bind those keys/ on IPs/Ports?
Looks like it is not possible to use ssl_cert inside
service { inet_listener {} }
Is it still necessary to run multiple instances like
2015 May 26
6
FREAK/Logjam, and SSL protocols to use
List, good afternoon,
I was reading up on a TLS Diffie Hellman protocol weakness described here
https://weakdh.org/sysadmin.html
which is similar to the earlier FREAK attack, and can result in
downgrade of cipher suites.
Part of the solution workaround that the researchers describe for
Dovecot here
https://weakdh.org/sysadmin.html
includes altering DH parameters length to 2048, and