https://www.mail-archive.com/dovecot at dovecot.org/msg77000.html

[Aki Tuomi]

> On 11/04/2023 09:03 EEST Aki Tuomi <aki.tuomi at open-xchange.com> wrote:
> 
>  
> > On 10/04/2023 15:37 EEST Martin Stenzel <stenzel at bw-host.de> wrote:
> > 
> > 
> > Hi team,
> > regarding:
> > https://www.mail-archive.com/dovecot@dovecot.org/msg77000.html
> > 
> > 
> > I have the very same problem.
> > 
> > 
> 
> <snip/>
> 
> Hi!
> 
> It seems that the ruby openssl module interface has changed slightly, I'll look into it. We might as well move it to https://github.com/dovecot/tools while at it.
> 
> For what it's worth, it works with ruby2.7 for me.
> 
> The reason it looks the same with -k pub and priv, is that the key does not match, so it just tells you what key to expect. I'll make the output bit more verbose about this too.
> 
> Aki
> 
> 

Also, if you need to verify the key ID, you can use

doveadm dump -t dcrypt-key /path/to/priv.pem

to see that the key hash matches with what decrypt.rb provides as "key hash".

Aki