Dovecot 2.2.25 fails on SSL

Aki Tuomi aki.tuomi at dovecot.fi
Fri Sep 2 14:41:35 UTC 2016


> On September 2, 2016 at 5:35 PM "Andreas M. Kirchwitz" <amk at spamfence.net> wrote:
> 
> 
> Aki Tuomi <aki.tuomi at dovecot.fi> wrote:
> 
> > Well, then it leaves only option of using /etc/ld.so.conf
> > so basically add your libssl location there.
> 
> That's not a working solution and not the purpose of /etc/ld.so.conf.
> 
> Currently, this is a real-life security issue in Dovecot 2.2.25,
> because it compiles fine but then - to the user - silently fails
> to use SSL. The user who doesn't know better reconfigures his
> client and all security is gone. :-(
> 
> Custom SSL worked fine in Dovecot 2.2.24, so obviously it can be
> made to work. The question is just where to add the proper options,
> or maybe "configure" is broken in some way.
> 
> I'm happy to try out more patches until the proper solution is
> found. I've already tried adding SSL libs in various locations
> during the build process but it hast always the same result
> that it never gets past "configure".
> 
> 	Greetings, Andreas

I tried various ways but wasn't able to get it to work. I can see if it can be fixed but it can take a while.

Aki


More information about the dovecot mailing list