Sync via ssh fails when ssl is active

[Stuart Henderson]

On 2022-01-20, Johan <johan at oxyl.net> wrote:
> I have computers at two different locations and one computer running 
> dovecot at each place. I sync my emails between these two servers using 
> ssh and I haven't had any problems with this lately until I upgraded 
> dovecot recently.
>
> I now get the following error at location "alfa" when trying to sync 
> with dovecot at location "delta"
>
> Jan 20 16:13:09 doveadm: Error: doveconf: Fatal: Error in configuration 
> file /etc/dovecot/conf.d/10-ssl.conf line 16: ssl_cert: Can't open file 
> /etc/letsencrypt/live/delta.oxyl.net/fullchain.pem: Permission denied

This is a problem that was introduced in 2.3.11 and fixed in 2.3.17.

Updating would be better, but as a workaround you can move the ssl_key
line to a separate config file, make it only readable by root, and use
e.g.

!include_try /etc/dovecot/ssl-keys.conf

to pull it in.