10-ssl.conf: Unknown setting: ssl / debian 1:2.2.13-12~deb8u

[Aki Tuomi]

https://github.com/dovecot/core/commit/e3d797bc851dc90fb88e68ae715c204d0f46e6ff

Aki


On 05.06.2017 12:42, Matthias Sitte wrote:
> Aki,
>
> is it possible to have doveconf print the current section upon error?
> Like, change the following error message
>
> May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in
> configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown
> setting: ssl
>
> to something like
>
> May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in
> configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown
> setting: ssl (in config section "imap-login")
>
> That would have made it a bit easier to spot the misconfiguration.
>
> Best,
> Matthias
>
> On 06/05/2017 09:51 AM, Aki Tuomi wrote:
>> Can you create file /etc/dovecot/conf.d/10-ssl.conf
>>
>> and type in 'ssl = yes'
>>
>> and nothing else? does it work after this? leave the default_vsz_limit
>> off for now.
>>
>> Aki
>>
>>
>> On 05.06.2017 10:34, Aki Tuomi wrote:
>>> Can you remove the offending settings, and then send it?
>>>
>>> Aki
>>>
>>>
>>> On 05.06.2017 10:30, Sophie Loewenthal wrote:
>>>> # doveconf -a 
>>>> # 2.2.13: /etc/dovecot/dovecot.conf
>>>> doveconf: Fatal: Error in configuration file
>>>> /etc/dovecot/conf.d/10-ssl.conf line 6: Unknown setting: ssl
>>>> doveconf: Error: managesieve-login: dump-capability process returned 89
>>>> doveconf: Fatal: Error in configuration file
>>>> /etc/dovecot/conf.d/10-master.conf line 35: Invalid size:
>>>> $default_vsz_limit
>>>>
>>>>
>>>> # grep default_vsz_limit /etc/dovecot/conf.d/10-master.conf
>>>> default_vsz_limit = 128M
>>>>   vsz_limit = $default_vsz_limit
>>>> #  vsz_limit = $default_vsz_limit
>>>>
>>>>
>>>>> On 5 Jun 2017, at 09:16, Aki Tuomi <aki.tuomi at dovecot.fi
>>>>> <mailto:aki.tuomi at dovecot.fi>> wrote:
>>>>>
>>>>> Ok, and can you provide, as attachment, output of "doveconf -a"?
>>>>>
>>>>> Aki
>>>>>
>>>>> On 05.06.2017 10:08, Sophie Loewenthal wrote:
>>>>>> Hi Aki,
>>>>>>
>>>>>> # dovecot --build-options
>>>>>> Build options: ioloop=epoll notify=inotify ipv6 openssl
>>>>>> io_block_size=8192
>>>>>> Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw
>>>>>> fail
>>>>>> SQL driver plugins: mysql postgresql sqlite
>>>>>> Passdb: checkpassword ldap pam passwd passwd-file shadow sql
>>>>>> Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>>
>>>>>> On June 5, 2017 8:59:08 AM CEST, Aki Tuomi <aki.tuomi at dovecot.fi
>>>>>> <mailto:aki.tuomi at dovecot.fi>> wrote:
>>>>>>> Can you provide output of
>>>>>>>
>>>>>>> dovecot --build-options
>>>>>>>
>>>>>>> Aki
>>>>>>>
>>>>>>> On 04.06.2017 12:10, Sophie Loewenthal wrote:
>>>>>>>> Hi Stefan,
>>>>>>>>
>>>>>>>> My apologies for the long delay.  Been ill.
>>>>>>>>
>>>>>>>> I tried this and had an error,
>>>>>>>>
>>>>>>>>
>>>>>>>> # mv /etc/dovecot/conf.d/10-ssl.conf
>>>>>>> /etc/dovecot/conf.d/10-ssl.conf.bak
>>>>>>>> # cp -p  /usr/share/dovecot/conf.d/10-ssl.conf /etc/dovecot/conf.d/
>>>>>>>> # /etc/init.d/dovecot restart
>>>>>>>>
>>>>>>>> /var/log/daemon.log
>>>>>>>> Jun  4 11:05:55 mail systemd[1]: Starting Dovecot IMAP/POP3 email
>>>>>>> server...
>>>>>>>> Jun  4 11:05:55 mail systemd[1]: Started Dovecot IMAP/POP3 email
>>>>>>> server.
>>>>>>>> Jun  4 11:05:55 mail dovecot[969]: doveconf: Fatal: Error in
>>>>>>> configuration file /etc/dovecot/conf.d/10-ssl.conf line 6: Unknown
>>>>>>> setting: ssl
>>>>>>>> Jun  4 11:05:55 mail dovecot[969]: doveconf: Error:
>>>>>>> managesieve-login: dump-capability process returned 89
>>>>>>>> Jun  4 11:05:55 mail dovecot[969]: doveconf: Fatal: Error in
>>>>>>> configuration file /etc/dovecot/conf.d/10-ssl.conf line 6: Unknown
>>>>>>> setting: ssl
>>>>>>>> Jun  4 11:05:55 mail systemd[1]: dovecot.service: main process
>>>>>>> exited, code=exited, status=89/n/a
>>>>>>>> Jun  4 11:05:55 mail systemd[1]: Unit dovecot.service entered failed
>>>>>>> state.
>>>>>>>>> On 18 May 2017, at 23:40, S. Kremer <sk71 at gmx.de
>>>>>>>>> <mailto:sk71 at gmx.de>> wrote:
>>>>>>>>>
>>>>>>>>> Hi Sophie
>>>>>>>>>
>>>>>>>>> did you try the following steps?
>>>>>>>>>
>>>>>>>>> 1. rename /etc/dovecot/conf.d/10-ssl.conf to
>>>>>>>>> /etc/dovecot/conf.d/10-ssl.conf.bak
>>>>>>>>> 2. copy /usr/share/dovecot/conf.d/10-ssl.conf to
>>>>>>> /etc/dovecot/conf.d/
>>>>>>>>> 3. restart dovecot
>>>>>>>>>
>>>>>>>>> what happens? start dovecot normally?
>>>>>>>>>
>>>>>>>>> if so
>>>>>>>>>
>>>>>>>>> make a new cert with /usr/share/dovecot/mkcert.sh
>>>>>>>>>
>>>>>>>>> and do changes in /etc/dovecot/conf.d/10-ssl.conf
>>>>>>>>>
>>>>>>>>> ssl = yes
>>>>>>>>> ssl_cert = </etc/dovecot/dovecot.pem
>>>>>>>>> ssl_key = </etc/dovecot/private/dovecot.pem
>>>>>>>>>
>>>>>>>>> then restart dovecot. What happens now?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Best regards
>>>>>>>>> Stefan
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Am 18.05.2017 um 22:01 schrieb Sophie Loewenthal:
>>>>>>>>>> Hi,
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> I've been trying to get dovecot2 running and kept having this error
>>>>>>> message:
>>>>>>>>>> May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email
>>>>>>> server.
>>>>>>>>>> May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in
>>>>>>> configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown
>>>>>>> setting: ssl
>>>>>>>>>> # dovecot --build-options
>>>>>>>>>> Build options: ioloop=epoll notify=inotify ipv6 openssl
>>>>>>> io_block_size=8192
>>>>>>>>>> Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c
>>>>>>> raw fail
>>>>>>>>>> SQL driver plugins: mysql postgresql sqlite
>>>>>>>>>> Passdb: checkpassword ldap pam passwd passwd-file shadow sql
>>>>>>>>>> Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file
>>>>>>> sql
>>>>>>>>>> # openssl version
>>>>>>>>>> OpenSSL 1.0.1t  3 May 2016
>>>>>>>>>>
>>>>>>>>>> This package is from from Debian repos with version number
>>>>>>> 1:2.2.13-12~deb8u amd64
>>>>>>>>>> In case I had inadvertently entered some invisible charaters in
>>>>>>> 10-ssl.conf, I deleted and typed this out. Not copy-pasted:
>>>>>>>>>> # >10-ssl.conf
>>>>>>>>>> # cat 10-ssl.conf
>>>>>>>>>> # echo 'ssl = required' >10-ssl.conf
>>>>>>>>>> # echo 'ssl_key  = </etc/ssl/private/xxx.key' >>10-ssl.conf
>>>>>>>>>> # echo 'ssl_cert = </etc/ssl/private/xxx.pem' >>10-ssl.conf
>>>>>>>>>>
>>>>>>>>>> I’ve done usual searching online for a week and read some dox, but
>>>>>>> cannot see what I’ve missed out.
>>>>>>>>>> Any ideas? Please?
>>>>>>>>>>
>>>>>>>>>> Thanks,
>>>>>>>>>> Sophie
>>>>>>>>>>