Hi,
Hi,
I have two machines with zentyal 6.2 and I have the offer on the web gui to upgrade to zentyal 7.0, however the process gets stuck on preparing. On both machines I have zentyal core 6.2.3, on web gui there is 6.2.8 suggestion (it redirects to doc page), but I cannot update it even via command line.
Any idea?
Thank you
You have to upgrade to 6.2.8 before attempting to upgrade to 7.0. Make sure you have a backup or snapshot before attempting an upgrade.
The latest version is 6.2.9.
After the upgrade dovecot IMAP service stopped working
In the mail.log file there are these warnings:
dovecot: config: Warning: please set ssl_dh=</etc/dovecot/dh.pem
config: Warning: You can generate it with: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem
I tried to regenerate the "dh.pem" file with these methods:
dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > dh.pem
openssl dhparam -out dh.pem 4096
openssl dhparam -out dh.pem 8192
openssl genpkey -genparam -algorithm DH -out dh.pem -pkeyopt dh_paramgen_prime_len:4096
and modified ssl_dh option in files /etc/dovecot/conf.d/10-ssl.conf and /usr/share/dovecot/conf.d/10-ssl.conf from /usr/share/dovecot/dh.pem to /etc/dovecot/dh.pem and his group from root to dovecot without success
I always got the error when mail client connect:
dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small: user=<>, rip=...
Please, try to generate the key using the following command:
sudo openssl dhparam -out /etc/dovecot/dh.pem 4096
Then, set the correct permissions:
sudo chown root:root /etc/dovecot/dh.pem
sudo chmod 0644 /etc/dovecot/dh.pem
After that, add the following parameter to the stub '
/usr/share/zentyal/stubs/mail/dovecot.conf.mas':
ssl_dh = </etc/dovecot/dh.pem
Finally, restart the Mail module:
sudo zs mail restart
Best regards, Daniel Joven.