Re: ee key too small

after upgrading from Fedora 42 to Fedora 43 the dovecot got upgraded to version 2.4.

imo, a sloppy choice on their part, forcing the _need_ to significantly change imap config at the same time as an OS upgrade, and 'breaking imap' for lots of folks.

Should the authority certificate be configured somewhere in dovecot?

start with a thorough read of

https://doc.dovecot.org/2.4.2/core/config/ssl.html

if using self-signed certs, you'll end up with something similar to

ssl = required
...
ssl_server {
	ca_file = /path/to/your_CA.crt.pem
	cert_file = /path/to/your_domain.server.ec.crt.pem
	key_file = /path/to/your_domain.server.ec.key.pem
	...
}
ssl_client {
	ca_file = /path/to/your_CA.crt.pem
	cert_file = /path/to/your_domain.client.ec.crt.pem
	key_file = /path/to/your_domain.client.ec.key.pem
	...
}