Hello everyone,

i stumbled across some serious problems with decrypting of e-mails if you use a Dovecot installation with OpenSSL 3.X so i started digging.

It turns out that Dovecot is not OpenSSL 3.X ready yet, at least if you compile it yourself.

The Debian Project adapted a OpenSSL 3.X patch to their repo version of Dovecot to make it run with Debian 12.

Alpine Linux has not added a Workaround Patch for Dovecot yet.

This is actually really bad if you want to Upgrade your Dovecot Server to a Distro which has OpenSSL 3.X as the new standard and you are not using their patched Repo Versions but instead compiling dovecot by yourself or install it from your package repos (which are not Debian 12 compatible also, which is probably because of OpenSSL 3.X i presume?)

However though i think that this compatibility should be added soon as more and more Distros are using OpenSSL 3.X.

So: Is there a approx. ETA when the OpenSSL Compatibility the devs worked/are working on is coming?

Thank you for your answers.

Kind regards from Germany

Niklas Meyer aka. DerLinkman

_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Reply via email to