Re: regarding ssl certificates

2019-03-14 Thread Gary via dovecot
Is there some reason to use a mail.domain.com cert for mail rarher than just using domain.com for everything? Historically the subdomain were used because they were on different hardware. That is www was on one machine and mail was on another.   Original Message   From:

Re: regarding ssl certificates

2019-03-14 Thread John Tulp via dovecot
On Thu, 2019-03-14 at 15:08 +0100, Stephan von Krawczynski via dovecot wrote: > On Thu, 14 Mar 2019 09:51:14 -0400 > Phil Turmel via dovecot wrote: > > > On 3/14/19 7:40 AM, Stephan von Krawczynski via dovecot wrote: > > > > > Sorry I have to write this, but this is again pointing people in a

Re: regarding ssl certificates

2019-03-14 Thread Joseph Tam via dovecot
mick crane wrote: Apache2 default install has this snake oil certificate Can make a new one for apache I won't go over some of the excellent points in previous posts, but I will mention SAN as a third type of certificate you can make. LetsEncrypt supports this type of certificate. This is

Dovecot crashing when attempting to search in virtual folder with fts_squat activated

2019-03-14 Thread Benjamin via dovecot
Hi everyone, I am running into a problem when trying to use fts_squat in a virtual folder. Without fts_squat plugin the search (from, subject...) works in all folders. With activated fts the search on the inbox folders works expectedly well but any attempt to search anything in any virtual

Re: regarding ssl certificates

2019-03-14 Thread Phil Turmel via dovecot
On 3/14/19 10:08 AM, Stephan von Krawczynski via dovecot wrote: Some facts for you, as obviously you have not understood what a CA is worth that is compromised by either hackers or "authorities". If you want to know more, read articles about closing of CA DigiNotar, like:

Re: Re: regarding ssl certificates

2019-03-14 Thread Jochen Bern via dovecot
(Sorry for the broken references, my MUA misplaced the e-mail I'm *actually* replying to.) On 03/14/2019 03:08 PM, Stephan von Krawczynski wrote: > Some facts for you, as obviously you have not understood what a CA is worth > that is compromised by either hackers or "authorities". > If you want

dovecot.conf "local hostname" uses only one resolved value

2019-03-14 Thread James via dovecot
https://wiki.dovecot.org/SSL/DovecotConfiguration#Different_certificates_per_IP_and_protocol says: local 192.0.2.10 { # instead of IP you can also use hostname, which will be resolved However if the name resolves to multiple values only one is used. Test. Choose any name with multiple

Re: Unable to set quota-fs plugin

2019-03-14 Thread Eric Grammatico via dovecot
Sure !! I got it ! I have connected with kmail, which keeps the imap opened and which has generated the error several times during the session. Please find attached the strace. Not sure this strace will help. I executed '/usr/libexec/dovecot/imap -u eric' and typed the same command as in the

Re: Unable to set quota-fs plugin

2019-03-14 Thread Yassine Chaouche via dovecot
How I'd love if I could just launch dovecot (with symbols) in a debugger, set a breakpoint in the right function call, and login from Rainloop. Then I could run the process one step at a time and inspect everything... Yassine. On 3/14/19 3:59 PM, Eric Grammatico via dovecot wrote: The error

Re: dovecot/config processes one more time - which are safe to kill?

2019-03-14 Thread Arkadiusz Miśkiewicz via dovecot
On 14/01/2019 01:43, Timo Sirainen wrote: > On 13 Dec 2018, at 11.18, Arkadiusz Miśkiewicz wrote: >> >> >> Hello. >> >> The problem with dovecot/config processes never ending and spawning new >> one on each reload >> (https://www.dovecot.org/list/dovecot/2016-November/106058.html) is >> becoming

Re: Unable to set quota-fs plugin

2019-03-14 Thread Eric Grammatico via dovecot
The error is generated when a user get connect from a client (RainLoop, a web UI). I don't know if the client request the quota or if it's automagically pushed from the imap process. I'd say the client requests. My problem is the process imap generating the error is launched just before and

Re: Quota questions

2019-03-14 Thread Edgaras Lukoševičius via dovecot
Yes, filesystem quotas. On 14/03/2019 16:55, Peter Hudec via dovecot wrote: Hi, by XFS do you mean filesystem quotas, yes ? regards Peter On 14 Mar 2019, at 15:19, Edgaras Lukoševičius via dovecot wrote: I was fighting domain quota for a long time, too. And I was

Re: Quota questions

2019-03-14 Thread Peter Hudec via dovecot
Hi, by XFS do you mean filesystem quotas, yes ? regards Peter > On 14 Mar 2019, at 15:19, Edgaras Lukoševičius via dovecot > wrote: > > I was fighting domain quota for a long time, too. And I was never really > successful at it, because group/domain quotas have

Re: Unable to set quota-fs plugin

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/14/19 3:40 PM, Eric Grammatico via dovecot wrote: Hi there, Well.. I didn't find a way to strace imap. If I well understood, the faulty IMAP is launched by dovecot from or after a succesfull imap-login process. I have executed manually '/usr/libexec/dovecot/imap -u eric' and typed

Re: Unable to set quota-fs plugin

2019-03-14 Thread Eric Grammatico via dovecot
Hi there, Well.. I didn't find a way to strace imap. If I well understood, the faulty IMAP is launched by dovecot from or after a succesfull imap-login process. I have executed manually '/usr/libexec/dovecot/imap -u eric' and typed getquotaroot "INBOX" which didn't reproduce the error seen in

Re: Quota questions

2019-03-14 Thread Edgaras Lukoševičius via dovecot
I was fighting domain quota for a long time, too. And I was never really successful at it, because group/domain quotas have multiple problems, and domain quota recalc is just one of them :) After a long trial and error I ended up implementing XFS project quotas. On 14/03/2019 15:14, Peter

Re: regarding ssl certificates

2019-03-14 Thread Stephan von Krawczynski via dovecot
On Thu, 14 Mar 2019 09:51:14 -0400 Phil Turmel via dovecot wrote: > On 3/14/19 7:40 AM, Stephan von Krawczynski via dovecot wrote: > > > Sorry I have to write this, but this is again pointing people in a fake > > security direction. > > You should be sorry, because you are wrong. > > > The

Re: dovecot-keywords are not preserved any more when moving mails between folders

2019-03-14 Thread Patrick Cernko via dovecot
Hi Timo, hi list, On 12.03.19 22:31, Timo Sirainen via dovecot wrote: On 12 Mar 2019, at 17.55, Dan Christensen via dovecot wrote: On Mar 12, 2019, Aki Tuomi via dovecot wrote: On 12.3.2019 13.46, Piper Andreas via dovecot wrote: after an upgrade of dovecot-2.2.5 to dovecot-2.3.4 the

Re: replication dropped imap flags

2019-03-14 Thread Patrick Cernko via dovecot
Update: The patch "dsync: Fix importing keywords with MAIL_TRANSACTION_SYNC flag set" mentioned in the mail from Timo Sirainen on 2019-03-12 22:31 on this list seems to fix this issue. Regards, -- Patrick Cernko +49 681 9325 5815 Joint Administration: Information Services and Technology

Re: regarding ssl certificates

2019-03-14 Thread Phil Turmel via dovecot
On 3/14/19 7:40 AM, Stephan von Krawczynski via dovecot wrote: Sorry I have to write this, but this is again pointing people in a fake security direction. You should be sorry, because you are wrong. The only valid authority for a certificate is the party using it. Any third party with

Quota questions

2019-03-14 Thread Peter Hudec via dovecot
Hi all, I’m a little bit confused about the quota plugin in dovecot and fighting the the issues the people had years ago. I spent readingg the old archives and the mailing list for 3 days and not able to get work some features. Single user quota is fine and simple, the group quota /for example

Re: flags not synced correctly with dovecot sync (dsync)

2019-03-14 Thread Dan Christensen via dovecot
On Mar 14, 2019, Timo Sirainen via dovecot wrote: > Looks like you're also using Maildir, which has another bug of > keywords not being copied correctly. Yes, I'm using Maildir. I'm not sure your description matches the bug, though. In my case, the flags are copied, but in the wrong direction

Re: regarding ssl certificates

2019-03-14 Thread Kostya Vasilyev via dovecot
On Thu, Mar 14, 2019, at 2:51 PM, Nikolai Lusan via dovecot wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi, > > So this question means you need to do some more reading about all SSL/TLS > services. > > On Thu, 2019-03-14 at 10:46 +, mick crane via dovecot wrote: > >

Re: regarding ssl certificates

2019-03-14 Thread Nikolai Lusan via dovecot
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, So this question means you need to do some more reading about all SSL/TLS services. On Thu, 2019-03-14 at 10:46 +, mick crane via dovecot wrote: > Excuse dopey question. > I'm not exactly clear about certificates. > Apache2 default install

Re: regarding ssl certificates

2019-03-14 Thread Stephan von Krawczynski via dovecot
On Thu, 14 Mar 2019 12:13:15 +0100 "Guido Goluke, MajorLabel via dovecot" wrote: > Op 14-03-19 om 11:46 schreef mick crane via dovecot: > > Excuse dopey question. > > I'm not exactly clear about certificates. > > Apache2 default install has this snake oil certificate > > Can make a new one for

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Patrick Cernko via dovecot
Hi Yassine, hi Kostya, On 14.03.19 10:17, Kostya Vasilyev via dovecot wrote: On Thu, Mar 14, 2019, at 12:09 PM, Yassine Chaouche via dovecot wrote: On 3/14/19 9:55 AM, Patrick Cernko via dovecot wrote: [...] the way we have configured exim, it neither needs reload or restart but reads the

Re: regarding ssl certificates

2019-03-14 Thread Guido Goluke, MajorLabel via dovecot
Op 14-03-19 om 11:46 schreef mick crane via dovecot: Excuse dopey question. I'm not exactly clear about certificates. Apache2 default install has this snake oil certificate Can make a new one for apache Can make one for dovecot Can make one for ssl Is there supposed to be the one (self signed

Re: regarding ssl certificates

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/14/19 11:46 AM, mick crane via dovecot wrote: Excuse dopey question. I'm not exactly clear about certificates. Apache2 default install has this snake oil certificate Can make a new one for apache Can make one for dovecot Can make one for ssl Is there supposed to be the one (self signed )

regarding ssl certificates

2019-03-14 Thread mick crane via dovecot
Excuse dopey question. I'm not exactly clear about certificates. Apache2 default install has this snake oil certificate Can make a new one for apache Can make one for dovecot Can make one for ssl Is there supposed to be the one (self signed ) certificate pair in one place for the machine that

Re: Unable to set quota-fs plugin

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/14/19 9:53 AM, Yassine Chaouche via dovecot wrote: On 3/13/19 2:10 PM, Eric Grammatico via dovecot wrote: Thanks Aki, Please find attached strace for imap and quota-status which report an error at the end. Regards, write(2, "/usr/libexec/dovecot/quota-statu"...,

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Kostya Vasilyev via dovecot
On Thu, Mar 14, 2019, at 12:09 PM, Yassine Chaouche via dovecot wrote: > On 3/14/19 9:55 AM, Patrick Cernko via dovecot wrote: > > > [...] the way we have configured exim, it neither needs reload or > > restart but reads the certificate file every time it has to use it. > > What happens if you

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Guido Goluke, MajorLabel via dovecot
On Thu, Mar 14, 2019, at 11:33 AM, Yassine Chaouche via dovecot wrote: On 3/14/19 9:32 AM, Yassine Chaouche via dovecot wrote: The general answere here is try and see, as you could totally test it on your own. The certificate is read at startup and put in memory for the rest of the execution

Re: flags not synced correctly with dovecot sync (dsync)

2019-03-14 Thread Timo Sirainen via dovecot
On 13 Mar 2019, at 22.43, Dan Christensen via dovecot wrote: > > On Mar 12, 2019, Dan Christensen via dovecot wrote: > >> In another thread, Timo wrote: >> >> On Mar 12, 2019, Timo Sirainen via dovecot wrote: >> >>> That bug is fixed with attached patch. >> >> I'll report back once I've

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/14/19 9:55 AM, Patrick Cernko via dovecot wrote: [...] the way we have configured exim, it neither needs reload or restart but reads the certificate file every time it has to use it. What happens if you goof off in the middle of an opeartion, temporarily putting a wrong file instead of

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Kostya Vasilyev via dovecot
On Thu, Mar 14, 2019, at 11:33 AM, Yassine Chaouche via dovecot wrote: > On 3/14/19 9:32 AM, Yassine Chaouche via dovecot wrote: > > The general answere here is try and see, as you could totally test it > > on your own. The certificate is read at startup and put in memory for > > the rest of the

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Patrick Cernko via dovecot
Hi, On 14.03.19 09:33, Yassine Chaouche via dovecot wrote: On 3/14/19 9:32 AM, Yassine Chaouche via dovecot wrote: The general answere here is try and see, as you could totally test it on your own. The certificate is read at startup and put in memory for the rest of the execution time.

Re: Unable to set quota-fs plugin

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/13/19 2:10 PM, Eric Grammatico via dovecot wrote: Thanks Aki, Please find attached strace for imap and quota-status which report an error at the end. Regards, write(2, "/usr/libexec/dovecot/quota-statu"..., 57/usr/libexec/dovecot/quota-status: invalid option -- 'u' Please retry

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Yassine Chaouche via dovecot
On 3/14/19 9:32 AM, Yassine Chaouche via dovecot wrote: The general answere here is try and see, as you could totally test it on your own. The certificate is read at startup and put in memory for the rest of the execution time. Dovecot won't monitor the file for changes on disk, as this would

Re: Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Yassine Chaouche via dovecot
The general answere here is try and see, as you could totally test it on your own. The certificate is read at startup and put in memory for the rest of the execution time. Dovecot won't monitor the file for changes on disk, as this would waste CPU cycles and make dovecot only slower for no

Am I right to assume certificate renewal with the same filename requires a dovecot reload/restart

2019-03-14 Thread Guido Goluke, MajorLabel via dovecot
Running dovecot 2.2, apologies if this question has been asked before: I've done the research but couldn't find anything. I run a server that uses dovecot as a MUA for Postfix and have a Let's Encrypt certificate that auto-renews through certbot on Ubuntu server 16.04. Dovecot did not pick up

Dovecot logrotation - old journal files are still in use

2019-03-14 Thread Denis V Razumovskiy via dovecot
Hi all Cannot understand, does it a bug or just a misconfiguration. In my Dovecot there are 3 files of logging (debug, info and .log)While executing logrotation, the new files are created, but old ones, namely dovecot.*.1 are still in use by the process I use next logrotate config for