Package: dovecot-imapd
Version: 1.0.rc15-2etch4
Severity: important
After a while dovecot does not allow SSL connections anymore because the
SSL parameters in the file /var/run/dovecot/login/ssl-parameters.dat
get corrupted. The file then has exactly 80 bytes size.
When that happens the log gets an entry like the following for every
connection attempt:
v1068 dovecot: imap-login: read(ssl-parameters.dat) failed: Unexpected EOF
If you run "/usr/lib/dovecot/ssl-build-param
/var/run/dovecot/login/ssl-parameters.dat" the file gets fixed (though it's a
somewhat long calculation, I have debian on a vserver) and the file has a
length of 255 bytes afterwards.
I disabled the auto-regeneration of that file in the dovecot
configuration via the "ssl_parameters_regenerate: 0" setting, but still
on every restart of the server the file is generated with wrong data.
My full dovecot configuration as "dovecot -n" says:
# /etc/dovecot/dovecot.conf
log_timestamp: %Y-%m-%d %H:%M:%S
ssl_parameters_regenerate: 0
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
mail_privileged_group: mail
mail_location: maildir:~/Maildir
auth default:
mechanisms: plain login
passdb:
driver: pam
userdb:
driver: passwd
socket:
type: listen
client:
path: /var/spool/postfix/private/auth
mode: 432
user: postfix
group: postfix
master:
-- System Information:
Debian Release: Debian Linux 4.0 Etch powered by [netclusive]
APT prefers proposed-updates
APT policy: (500, 'proposed-updates'), (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-028stab059.9
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages dovecot-imapd depends on:
ii dovecot-common 1.0.rc15-2etch4 secure mail server that supports m
ii libc6 2.3.6.ds1-13etch8 GNU C Library: Shared libraries
ii libssl0.9.8 0.9.8c-4etch3 SSL shared libraries
dovecot-imapd recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
