Dovecot 2.2.25 fails on SSL

Andreas M. Kirchwitz amk at krell.zikzak.de
Sun Jul 3 23:42:51 UTC 2016


	Dear Dovecot developers!

This problem already existed some years ago, has been fixed,
and now it's there again in Dovecot 2.2.25 (2.2.24 was fine).

I'm running CentOS 6 with a custom OpenSSL installation in /usr/local/ssl
Therefore, Dovecot is configured like this:

env SSL_CFLAGS="-I/usr/local/ssl/include" SSL_LIBS="-L/usr/local/ssl/lib -Wl,-R/usr/local/ssl/lib -lcrypto -lssl" ./configure --prefix=/usr/local/Dovecot-2.2.25 --with-ssl=openssl --with-ssldir=/usr/local/Dovecot-2.2.25/etc/dovecot/certs

With "pkg-config", the same options for SSL are provided.

"make" and "make install" run just fine, and the daemon starts
without any errors. However, if a user connects on port 993 (IMAPS),
Dovecot logs this failure message to syslog:

Jul  4 01:08:43 myhost dovecot: ssl-params: Fatal: Couldn't load required plugin /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so: dlopen() failed: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory
Jul  4 01:08:43 myhost dovecot: ssl-params: Error: child process failed with status 22784

ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libssl_iostream_openssl.so
        linux-gate.so.1 =>  (0x00e8c000)
        libcrypto.so.1.0.0 => not found
        libssl.so.1.0.0 => not found
        librt.so.1 => /lib/librt.so.1 (0x00be4000)
        libc.so.6 => /lib/libc.so.6 (0x001a6000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x003e4000)
        /lib/ld-linux.so.2 (0x007e7000)

ldd /usr/local/Dovecot-2.2.25/lib/dovecot/libdcrypt_openssl.so
        linux-gate.so.1 =>  (0x00dca000)
        libcrypto.so.1.0.0 => not found
        libssl.so.1.0.0 => not found
        librt.so.1 => /lib/librt.so.1 (0x00a7a000)
        libc.so.6 => /lib/libc.so.6 (0x00160000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x0072f000)
        /lib/ld-linux.so.2 (0x00560000)

When comparing to Dovecot 2.2.24:

ldd /usr/local/Dovecot-2.2.24/lib/dovecot/libssl_iostream_openssl.so
        linux-gate.so.1 =>  (0x0073d000)
        libcrypto.so.1.0.0 => /usr/local/ssl/lib/libcrypto.so.1.0.0 (0x00b04000)
        libssl.so.1.0.0 => /usr/local/ssl/lib/libssl.so.1.0.0 (0x0044a000)
        librt.so.1 => /lib/librt.so.1 (0x00a60000)
        libc.so.6 => /lib/libc.so.6 (0x001e5000)
        libdl.so.2 => /lib/libdl.so.2 (0x003a9000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x009d0000)
        /lib/ld-linux.so.2 (0x00d77000)

There's no libdcrypt_openssl.so in Dovecot 2.2.24, so I guess
with the newly introduced dcrypt stuff something with SSL went wrong.

Would be great if that could be fixed so that SSL works again.

	Thanks a lot in advance ... Andreas


More information about the dovecot mailing list