[Dovecot] Dovecot broken with newer OpenSSL

[Christian Rueger]

Timo Sirainen wrote:
> On Apr 17, 2009, at 12:18 AM, Brad wrote:
> 
>> In the logs I see messages like the following...
>>
>> dovecot: Apr 16 23:12:18 Info: imap-login: Disconnected (no auth 
>> attempts):
>> rip=2001:470:b01e:3:216:41ff:fe17:6933, lip=2001:470:1d:8c::2, TLS
>> handshaking: Disconnected
> 
> Anything else if you set verbose_ssl=yes?

same problem here on
OpenBSD 4.5-current (GENERIC) #28: Wed Apr 15 04:56:04 MDT 2009
    deraadt at sparc64.openbsd.org:/usr/src/sys/arch/sparc64/compile/GENERIC

with "OpenSSL 0.9.8k 25 Mar 2009" and Dovecot 1.1.14 from ports

log with verbose_ssl=yes:

dovecot: imap-login: Disconnected (no auth attempts): rip=Y.Y.Y.Y, 
lip=X.X.X.X, TLS handshaking: SSL_accept() failed: error:0307F041:bignum 
routines:BNRAND:malloc failure

hope that helps