Messages

1

News and Announcements / Re: Upgrade from Zentyal 6.2 to 7.0 is now available

« on: March 30, 2021, 02:44:19 pm »

Thanks @Daniel Joven, problem solved!

2

News and Announcements / Re: Upgrade from Zentyal 6.2 to 7.0 is now available

« on: March 26, 2021, 04:39:49 pm »

After the upgrade dovecot IMAP service stopped working
In the mail.log file there are these warnings:

Code: [Select]

  dovecot: config: Warning: please set ssl_dh=</etc/dovecot/dh.pem
  config: Warning: You can generate it with: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem
I tried to regenerate the "dh.pem" file with these methods:

Code: [Select]

  dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > dh.pem
  openssl dhparam -out dh.pem 4096
  openssl dhparam -out dh.pem 8192
  openssl genpkey -genparam -algorithm DH -out dh.pem -pkeyopt dh_paramgen_prime_len:4096
and modified ssl_dh option in  files /etc/dovecot/conf.d/10-ssl.conf and /usr/share/dovecot/conf.d/10-ssl.conf from /usr/share/dovecot/dh.pem to /etc/dovecot/dh.pem and his group from root to dovecot without success

I always got the error when mail client connect:

Code: [Select]

  dovecot: imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters: error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small: user=<>, rip=...