Re: deliver fails because of a permission issue with SSL private key file

Thanks, Aki!

I was about to post essentially the same problem (except in my case fetchmail executes deliver). What you sent makes it work for me.

I'd like to understand a bit more, if you've got time to explain or point to relevant doc sections.

• Is this expected behavior in 2.4, or is it considered a bug?

• If it's expected behavior, why does this workaround work?

Thanks again,

-Martin

On 2/17/26 8:36 AM, Aki Tuomi via dovecot wrote:

  On 17/02/2026 18:19 EET Markus Schoenhaber via dovecot
  <[1]dovecot@dovecot.org> wrote:


  17.02.26, 17:11 +0100, Benny Pedersen via dovecot:


    Markus Schoenhaber via dovecot skrev den 2026-02-17 16:53:

    if world can read private keys, then is sooks :)

  I know that.

  I simply wanted to know whether what "looks more like syntax error than
  permission error" goes away if I change the permission.
  And it does.

  --
  Regards
  mks

  _______________________________________________
  dovecot mailing list -- [2]dovecot@dovecot.org
  To unsubscribe send an email to [3]dovecot-leave@dovecot.org


Looks like my mail client showed your email wrong. Apologies.

You can workaround this issue with

ssl = no
!try_include /etc/dovecot/ssl.conf

and put

ssl = yes
ssl_server {
   ...
}

in ssl.conf and chmod 0640 root:root.

Aki

References

Visible links
1. mailto:dovecot@dovecot.org
2. mailto:dovecot@dovecot.org
3. mailto:dovecot-leave@dovecot.org

---

dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org