Package: dovecot-imapd
Version: 1:2.2.26.0-3
Severity: normal

Dear Maintainer,

upgrading dovecot from 1:2.2.26.0-1 to 1:2.2.26.0-3 results in this error in
the log:

dovecot: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 
'SSLv2'

and not being able to log in. Adding

ssl_protocols = !SSLv3

to my config fixed it for now. Note that I hadn't specified ssl_protocols
before, so I guess the default is broken.

Cheers Jochen

-- Package-specific info:

dovecot configuration
---------------------
# 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.16 (fed8554)
# OS: Linux 4.7.0-1-amd64 x86_64 Debian stretch/sid 
mail_location = mbox:~/mail:INBOX=/var/mail/%u
mail_max_userip_connections = 50
namespace inbox {
  [..]
}
passdb {
  driver = pam
}
passdb {
  args = scheme=CRYPT username_format=%u /etc/dovecot/users
  driver = passwd-file
}
plugin {
  sieve = file:~/sieve;active=~/.dovecot.sieve
}
protocols = " imap"
ssl_cert = </etc/ssl/certs/ssl-cert-snakeoil.pem
ssl_key =  # hidden, use -P to show it
ssl_protocols = !SSLv3
userdb {
  driver = passwd
}
userdb {
  args = username_format=%u /etc/dovecot/users
  driver = passwd-file
}

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/12 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages dovecot-imapd depends on:
ii  dovecot-core  1:2.2.26.0-3
ii  libbz2-1.0    1.0.6-8
ii  libc6         2.24-5
ii  liblz4-1      0.0~r131-2
ii  liblzma5      5.2.2-1.2
ii  ucf           3.0036
ii  zlib1g        1:1.2.8.dfsg-2+b3

dovecot-imapd recommends no packages.

Versions of packages dovecot-imapd suggests:
pn  ufw  <none>

Versions of packages dovecot-imapd is related to:
ii  dovecot-core [dovecot-common]  1:2.2.26.0-3
pn  dovecot-dbg                    <none>
pn  dovecot-dev                    <none>
pn  dovecot-gssapi                 <none>
ii  dovecot-imapd                  1:2.2.26.0-3
pn  dovecot-ldap                   <none>
pn  dovecot-lmtpd                  <none>
pn  dovecot-managesieved           <none>
pn  dovecot-mysql                  <none>
pn  dovecot-pgsql                  <none>
pn  dovecot-pop3d                  <none>
ii  dovecot-sieve                  1:2.2.26.0-3
pn  dovecot-sqlite                 <none>

-- no debconf information

Reply via email to