Bug#1011051: libssl3: upgrade to libssl3 broke my dovecot setup
On Monday, June 6, 2022 6:11:38 A.M. CDT Bernhard Übelacker wrote: > The recent dovecot upload contains this fix: > >dovecot (1:2.3.19+dfsg1-1) unstable; urgency=medium > * [d223bbd] d/patches: add patch to support openssl 3.0 (Closes: > #996273) > > > https://salsa.debian.org/debian/dovecot/-/commit/d223bbd1d0968ad2b46c4316c1 > 02c11bde8c5075 That's good news. Does it mean one can remove the workaround (commenting out "providers = provider_sect") ? Regards, -Steve
Bug#1011051: libssl3: upgrade to libssl3 broke my dovecot setup
Hello, I think Ubuntu already did cherry-pick a fedora dovecot change for new openssl 3.0 https://patches.ubuntu.com/d/dovecot/dovecot_1:2.3.16+dfsg1-3ubuntu3.patch Maybe it can fix this specific issue. G. On Fri, 20 May 2022 11:27:54 + nona wrote: I can confirm this bug. The fix Skibbi proposed enables my mailserver to receive e-mails again. But I cannot login via IMAP receiving the following errors: # connecting from a laptop to the mail server: Socket error: secure connect to example.org (1.2.3.4:143): error:1408F10B:SSL routines:ssl3_get_record:wrong version number # mail server log /var/log/mail.log: May 20 13:22:59 mail dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load SSL certificate (ssl_cert setting): error:25066067:DSO support routines:dlfcn_load:could not load the shared library: filename(libproviders.so): libproviders.so: cannot open shared object file: No such file or directory, error:25070067:DSO support routines:DSO_load:could not load the shared library, error:0E07506E:configuration file routines:module_load_dso:error loading dso: module=providers, path=providers, error:0E076071:configuration file routines:module_run:unknown module name: module=providers: user=<>, rip=5.6.7.8, lip=1.2.3.4, session=<5vd2tm/faYY+1vxS> May 20 13:22:59 mail dovecot: imap-login: Disconnected: TLS initialization failed. (no auth attempts in 0 secs): user=<>, rip=5.6.7.8, lip=1.2.3.4, session=<5vd2tm/faYY+1vxS>
Bug#1011051: libssl3: upgrade to libssl3 broke my dovecot setup
Package: libssl3 Version: 3.0.3-3 Severity: grave Justification: renders package unusable After upgrading to libssl3 broke my dovecot setup with following error: imap-login: Error: Failed to initialize SSL server context: Can't load SSL certificate (ssl_cert setting): error:25066067:DSO support routines:dlfcn_load:could not load the shared library: filename(libproviders.so): libproviders.so: cannot open shared object file: No such file or directory, error:25070067:DSO support routines:DSO_load:could not load the shared library, error:0E07506E:configuration file routines:module_load_dso:error loading dso: module=providers, path=providers, error:0E076071:configuration file routines:module_run:unknown module name: module=providers Commenting out providers = provider_sect in /etc/ssl/openssl.cnf fixes the issue. I guess this is closely related to the following debian bug: #918727 -- System Information: Debian Release: bookworm/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 5.17.0-1-amd64 (SMP w/2 CPU threads; PREEMPT) Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages libssl3 depends on: ii libc6 2.33-7 libssl3 recommends no packages. libssl3 suggests no packages. -- no debconf information
