- dovecot - dovecot.org

Unable to set ssl_min_protocol=TLSv1.3
by Thomas Schneider 07 May '20

07 May '20

Good $daytime, as per the recommendations of Mozilla’s SSL config generator[0], I wanted to set ssl_min_protocol=TLSv1.3 in my dovecot config. This produced the error: imap-login: Error: Failed to initialize SSL server context: Unknown ssl_min_protocol setting 'TLSv1.3' After some digging, I found the function that parses this setting in src/lib-ssl-iostream/iostream-openssl-common.c (openssl_min_protocol_to_options()), which maps strings such as SSL_TXT_TLSV1_2 == "TLSv1.2" (from openssl/ssl.h) to the appropriate version and option defines of OpenSSL. Said openssl/ssl.h does not contain a SSL_TXT_TLSV1_3, so it’s no surprise that dovecot does not know this setting. As a quick fix, I could probably extend struct {…} protocol_versions[] (in iostream-openssl-common.c again) with an appropriate "TLSv1.3" entry (and send a patch), though I would also suggest to OpenSSL to add a SSL_TXT_TLSV1_3 define. Unfortunately, I have not found a config setting in dovecot to set SSL_OP_NO_TLSv1_2, or in fact any way to enforce TLS >=1.3, except maybe via the cipher list string. I think that dovecot should support setting this, and I’d also gladly provide a patch. Thanks, Thomas [0]: https://ssl-config.mozilla.org/#server=dovecot&version=2.3.4.1&config=moder…

3 2

Urgent - Help needed
by Kishore Potnuru 07 May '20

07 May '20

Hi All, I am having dovecot installed on my redhat 7. There was an email came to my "Maildir" directory as per the logs. There is an application reading the emails from the Maildir inbox. I have the log stating the email has been delivered to maildir folder below. But the application team says that they didn't receive the email. The emails is also not there in the Maildir folder. Is there any way/log we can see, from Maildir folder, whether the application picked the email? or where that email went (to any server) from the Maildir folder? any such verification is possible? ============= [root@testserver log]# grep EB6A2206818 temp.log May 5 07:35:20 testserver postfix/smtpd[29839]: EB6A2206818: client=test-server May 5 07:35:20 testserver postfix/cleanup[29842]: EB6A2206818: message-id=<AM0PR01MB42257878E93ED4C6> May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: from=< tester1(a)testing.com>, size=13614, nrcpt=1 (queue active) May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (delivered to maildir) May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: removed ============== Please help me... Thanks & Regards, Kishore Potnuru

7 17

Re: Urgent - Help needed
by Kishore Potnuru 05 May '20

05 May '20

Thank you for the reply. Actually there are 7 emails sent by the user. 2 emails are delivered successfully. 5 are missing. All are having the same log with virtual. At present I might not be able to change those settings.... Is there any way to verify they are delivered to them or not? do we have any logs to verify the same? On Tue, May 5, 2020 at 9:16 AM Zhang Huangbin <zhb(a)iredmail.org> wrote: > > > On May 5, 2020, at 4:06 PM, Kishore Potnuru <kishore.reachme(a)gmail.com> > wrote: > > > > May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< > selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, > dsn=2.0.0, status=sent (delivered to maildir) > > According to the log, this user is using Postfix builtin transport > "virtual" as LDA, not Dovecot LDA. Fixing this should get your email > delivered correctly. > > ---- > Zhang Huangbin, founder of iRedMail project: https://www.iredmail.org/ > >

1 0

Dovecot LDAP/AD with exim as mta
by Benoît PELISSIER 05 May '20

05 May '20

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can do it ? Or i need do it with exim (or postfix) ? Thanks Benoît

4 4

Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
by hanasaki＠gmail.com 05 May '20

05 May '20

Recently thunderbird and Dovecot IMAPS cannot agree on SSL however Evolution, on the exact same system, is working fine with the same accounts. Tried recreating the Dovecot cert and also the thunderbird accounts from scratch. The OpenSSL raw client works fine as well. Would someone also confirm the openssl commands to create a selfsigned cert for dovecot imaps. They cert created does work with evolution; just not thunderbird. Thoughts? Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<--> Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL alert: where=0x4004, ret=554: fatal bad certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:19 firewall dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=00, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<---> reference http://forums.debian.net/viewtopic.php?f=5&t=145849

6 12

Is It possbile to convert to DBox or MDBox on a per user basis?
by Asai 04 May '20

04 May '20

Greetings, Is It possbile to convert to DBox or MDBox on a per user basis? If so, can someone point me to the correct documentation? Thank you, -- Asai

2 1

Issue with doveadm backup
by Asai 02 May '20

02 May '20

Greetings, Lately I've been seeing this error pop up when running a nightly cron to a backup share with doveadm: Error: stat(/vmail/domain.tld/user/.dovecot-box-sync.lock/tmp) failed: Not a directory: 1 Time(s) This is the command: doveadm backup -u user(a)domain.tld maildir:backupshare/daily/domain.tld/user Our main vmail directory is on an NFS share and seems to be working fine. This has only occurred recently. Can anyone offer any insights into what this is and fixing it if need be? -- Asai

1 0

Problems during replication
by Francis Augusto Medeiros-Logeay 02 May '20

02 May '20

Hi, I migrated my dovecot instance to a new server. I moved the mail directories, databases, etc. Replication is on, and I keep having these errors: May 02 16:19:45 dsync-local(francis(a)francisaugusto.com): Error: Couldn't lock /var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock: fcntl(/var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 178) May 02 16:19:45 doveadm: Error: Couldn't lock /var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock: fcntl(/var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 185) See the errors are both from dsync-local and doveadm. Any tips on how to fix this? Best, Francis

1 0

sender rewriting scheme
by Mathieu Gosset 01 May '20

01 May '20

Hello, I would like to know if dovecot/pigeonhole provide a way to do sieve redirection with sender rewriting scheme (srs)? I apologize in advance if that e-mail address isn't meant for assistance, but I've asked on the official irc channel on freenode and was told to direct my query to dovecot(a)dovecot.org, I hope you won't mind. Thanking you in advance Best Regards Mathieu Gosset

2 2

Shared folder replication - query - can it be replicated?
by Daniel Botting 01 May '20

01 May '20

Hi, Further to my earlier posting to the mailing list this morning regarding replicating of public namespaces is it possible that a shared name space can be replicated: https://wiki.dovecot.org/SharedMailboxes/Shared We use LDAP, the thought being that an LDAP service account is created and the corresponding mailbox is shared to other mail users on the server. Kind regards Daniel

1 0