<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">All,<div><br></div><div>The machine I’m running dovecot on is:</div><div><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">RHEL7.9 3.10.0-1160.31.1.el7.x86_64<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">I can run Systemctl restart dovecot then status or<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">/usr/libexec/dovecot/ssl-params and I get the following error.<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Info: Generating SSL parameters<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Fatal: ssl_iostream_generate_params(4096) failed: DH_generate_parameters(bits=512, gen=2) failed: error:0506A06E:lib(5):func(106):reason(110), error 0506A003:lib(5):func(106):reason(3)<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Error: child process failed with status 22784<o:p></o:p></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">I can generate a diffie-hellman pem with </p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">openssl dhparam -out /etc/dovecot/dh.pem 4096</p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">But dovecot 2.2.36 does not have the option of telling it where the dh.pem file is located in the config like version 2.3 does. </p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Is my error related to FIPS and is there a way around it? </p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><br></p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">My dovecot version is:</p><p class="MsoNormal" style="-webkit-text-size-adjust: auto; margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">Dovecot version 2.2.36 release 8.el7</p><div><br></div><div>Thanks in advance to anyone willing to help out, I know it’s voluntary 🙏<br><br>Thanks,</div><div>bpartin2009</div><div><br><div dir="ltr">Sent from my iPhone</div></div></div></body></html>