On 17/10/2023 11:23 EEST Niklas Meyer niklas.meyer@tinc.gmbh wrote:
Hello everyone,
i stumbled across some serious problems with decrypting of e-mails if you use a Dovecot installation with OpenSSL 3.X so i started digging.
It turns out that Dovecot is not OpenSSL 3.X ready yet, at least if you compile it yourself.
The Debian Project adapted a OpenSSL 3.X patch to their repo version of Dovecot to make it run with Debian 12.
Alpine Linux has not added a Workaround Patch for Dovecot yet.
This is actually really bad if you want to Upgrade your Dovecot Server to a Distro which has OpenSSL 3.X as the new standard and you are not using their patched Repo Versions but instead compiling dovecot by yourself or install it from your package repos (which are not Debian 12 compatible also, which is probably because of OpenSSL 3.X i presume?)
However though i think that this compatibility should be added soon as more and more Distros are using OpenSSL 3.X.
So: Is there a approx. ETA when the OpenSSL Compatibility the devs worked/are working on is coming?
Thank you for your answers.
Kind regards from Germany
Niklas Meyer aka. DerLinkman
dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org
Hi!
OpenSSL 3.0 support is already in main branch and will be in 2.4 release.
Aki