Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-09-14 Thread Aki Tuomi
> On 14/09/2022 19:34 EEST Serveria Support wrote: > > > Thanks for your help. Do you know in which folder the keys are stored? > I'd like to check the permissions... > Some notes here, after reading this thread again: - Keys are stored in mail_attributes file, which depends on your conf

Re: Panic: file mail-index-transaction-finish.c: line 185

2022-09-14 Thread Aki Tuomi
> On 15/09/2022 07:57 EEST Arkadiusz Miśkiewicz wrote: > > > On 29.12.2021 10:26, Aki Tuomi wrote: > > > >> On 29/12/2021 11:20 tobiswo...@gmail.com wrote: > >> > >> > >> Hi list > >> > >> I have weird issue with my Dovecot 2.3.17.1 (476cd46418) > >> When deleting a certain amount of mess

Re: Panic: file mail-index-transaction-finish.c: line 185

2022-09-14 Thread Arkadiusz Miśkiewicz
On 29.12.2021 10:26, Aki Tuomi wrote: On 29/12/2021 11:20 tobiswo...@gmail.com wrote: Hi list I have weird issue with my Dovecot 2.3.17.1 (476cd46418) When deleting a certain amount of messages from my INBOX via my MUA (Evolution) all over sudden dovecot starts to panic Panic: file mail-

Re: Bug report: TLS SNI for LDAP userdb/passdb

2022-09-14 Thread Aki Tuomi
On September 14, 2022 5:29:46 PM GMT+03:00, Tobias Wolter wrote: >Cheers, > >Dovecot 2.3.4.1 (Debian stable) here, and the changelog does not offer >any hope of salvation, so a bug report it is. > >The LDAP connections for userdb/passdb do not support SNI via TLS. > >Simple construct to reprod

Bug report: TLS SNI for LDAP userdb/passdb

2022-09-14 Thread Tobias Wolter
Cheers, Dovecot 2.3.4.1 (Debian stable) here, and the changelog does not offer any hope of salvation, so a bug report it is. The LDAP connections for userdb/passdb do not support SNI via TLS. Simple construct to reproduce this: 0.) Have a.pem with SAN `foo.example.com`, b.pem with `bar.example.

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-09-14 Thread Serveria Support
Thanks for your help. Do you know in which folder the keys are stored? I'd like to check the permissions... On 2022-09-14 18:56, hi@zakaria.website wrote: On 2022-09-14 16:04, Serveria Support wrote: Oh, I thought that section is for the global keys. I'm trying to use per-user/per-folder keys.

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-09-14 Thread Serveria Support
Oh, I thought that section is for the global keys. I'm trying to use per-user/per-folder keys. I used this command: doveadm -o plugin/mail_crypt_private_password=xx mailbox cryptokey generate -u u...@mydomain.xyz -URf On 2022-09-14 17:47, hi@zakaria.website wrote: On 2022-09-14 15:

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-09-14 Thread Serveria Support
How can I set the global private key in conf? I was following the official mail-crypt tutorial. This is what I have in dovecot.conf mail-crypt section: mail_crypt_curve = secp521r1 mail_crypt_save_version = 2 mail_crypt_require_encrypted_user_key = yes On 2022-09-14 17:23, hi@zakaria

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-09-14 Thread Serveria Support
Hi, This log shows no errors. Running doveadm fetch command gives me this: doveadm(u...@mydomain.xyz): Error: fetch(text) failed for box=INBOX uid=15: read() failed: read(/var/vmail/vmail1/mydomain.xyz/a/b/d/-2022.09.09.05.52.29//Maildir/cur/1663034263.M491074P1457418.mx,S=2217,W=2266:

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread PGNet Dev
cert had an invalid/incorrect hostname fyi, https://kb.mozillazine.org/Files_and_folders_in_the_profile_-_Thunderbird ... cert_override.txt This is an optional file used to store a security exception. It appears to store the hos

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread Goetz Schultz
Hi, I had the same issue on TB102. Self-Signed certificates rejected despite having the CA installed correctly as authority. Turns out out that that TB now wants extension "Subject Alt Names". Added that and all works now. Seems another Google pressed issue being introduced (my Chromium had s

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread Mark Stevens
I just ran into something similar with the latest version of TB. I updated our SSL cert for Dovecot but TB could not access my email over port 993. I clicked on file then get new messages for all accounts. TB popped up a warning that the cert had an invalid/incorrect hostname and if I should al

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread Meikel
Hello. Am 14.09.2022 um 13:59 schrieb Christian Mack: Sound to me, as if Thunderbird does not know the CA used to (self) sign that server certificate. Following the documentation at https://community.letsencrypt.org/t/simple-guide-using-lets-encrypt-ssl-certs-with-dovecot/2921 I configured

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread Christian Mack
Hello Sound to me, as if Thunderbird does not know the CA used to (self) sign that server certificate. As it does not know and trust that server certifikate for sending email, it disconnects with that generic error. Thunderbird has its own trusted CA store, therefore not using the one from the OS

Re: Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread spi
Am 14.09.22 um 13:14 schrieb Meikel: Hi folks, on a Rocky Linux 8.6 based home server I run Dovecot with an account that I use as an archive. Archive means, that from different Thunderbird instances I connect to that Dovecot via IMAPS to move emails there, that I want to keep. Since some days f

Thunderbird can't connect to Dovecot (bad certificate: SSL alert number 42)

2022-09-14 Thread Meikel
Hi folks, on a Rocky Linux 8.6 based home server I run Dovecot with an account that I use as an archive. Archive means, that from different Thunderbird instances I connect to that Dovecot via IMAPS to move emails there, that I want to keep. Since some days from all Thunderbird instances I can