Re: Tip: update dovecot MD5 password from PAM

2017-03-27 Thread Ruga
Right. But that's what I experienced. The next experiment is sheduled in two weeks... I will keep notes and logs for you. Sent from ProtonMail Mobile On Mon, Mar 27, 2017 at 2:21 PM, Aki Tuomi <aki.tu...@dovecot.fi> wrote: On 27.03.2017 01:13, Ruga wrote: > It is a jolly bad id

Re: Tip: update dovecot MD5 password from PAM

2017-03-26 Thread Ruga
It is a jolly bad idea to use the same password for both email and system access. On TLS+plaintext, if your passwords are slurped by a python script, all accounts are compromised. Congratulations, the NSA will love you. On the other side of the ocean, however, there are European states where

v2.2.28: var-expand.c

2017-02-26 Thread Ruga
var-expand.c:687:17: warning: passing an object that undergoes default argument promotion to 'va_start' has undefined behavior [-Wvarargs] va_start(args, key2); ^ var-expand.c:674:58: note: parameter of type 'char' is declared here var_expand_table_build(char key, const char *value, char

Re: v2.2.28: patches (to use libressl 2.4.5) and test error (strftime)

2017-02-26 Thread Ruga
libressl 2.4.5) and test error (strftime) Local Time: 25 February 2017 8:54 PM UTC Time: 25 February 2017 19:54 From: t...@iki.fi To: Ruga <r...@protonmail.com> Dovecot Mailing List <dovecot@dovecot.org> On 25 Feb 2017, at 21.11, Ruga <r...@protonmail.com> wrote: > > t_s

v2.2.28: patches (to use libressl 2.4.5) and test error (strftime)

2017-02-25 Thread Ruga
t_strftime and variants now .. : ok test-time-util.c:123: Assert failed: strcmp(t_strftime(RFC2822_FMT, gmtime()), exp) == 0 test-time-util.c:124: Assert failed: strcmp(t_strfgmtime(RFC2822_FMT, ts), exp) == 0 t_strftime and variants fixed timestamp

Re: Scaling to 10 Million IMAP sessions on a single server

2017-02-23 Thread Ruga
Yes, and they (isode) still use it as marketing evidence. The benchmarking tool project also seems out of maintenance. Sent from ProtonMail Mobile On Thu, Feb 23, 2017 at 8:52 AM, M. Balridge <'dove...@r.paypc.com'> wrote: Quoting Ruga <r...@protonmail.com>: > Comparison of

Re: Scaling to 10 Million IMAP sessions on a single server

2017-02-22 Thread Ruga
Comparison of Dovecot, Uwash, Courier, Cyrus and M-Box: http://www.isode.com/whitepapers/mbox-benchmark.html

Re: Scaling to 10 Million IMAP sessions on a single server

2017-02-21 Thread Ruga
A more efficient algorithm would reduce computational complexity, and the need for expensive power-hungry CPUs. Sent from ProtonMail Mobile On Wed, Feb 22, 2017 at 5:12 AM, Christian Balzer <'ch...@gol.com'> wrote: On Tue, 21 Feb 2017 09:49:39 -0500 KT Walrus wrote: > I just read this blog:

SNI with mixed certs

2017-02-02 Thread Ruga
Dovecot SNI is failing hard today. Server with n domains, each with a startssl certificate of its own, all certificates expired this morning. Decision: move to Letsencrypt. Firsr certificate issued and installed. Other domains in the pipeline. Dovecot server rebooted. Expected result: one

Re: Dovecot source code audit

2017-01-17 Thread Ruga
"used in 68% of IMAP server deployments worldwide"... ... this means that hackers have a new target to prove themselves, and to prove Cure53 is less than we think they are. We ought to brace for the storm ahead. On Fri, Jan 13, 2017 at 6:17 PM, Timo Sirainen <'t...@iki.fi'> wrote: Mozilla

Re: Dovecot source code audit

2017-01-17 Thread Ruga
Congratulations. On Fri, Jan 13, 2017 at 6:17 PM, Timo Sirainen <'t...@iki.fi'> wrote: Mozilla sponsored source code audit for Dovecot. So thanks to them we have our first public code audit: https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#dovecot Dates: October 2016 - January 2017

Re: Broken OS after upgrade

2017-01-11 Thread Ruga
http://pubs.opengroup.org/onlinepubs/9699919799/basedefs/sys_types.h.html#tag_13_67 On Wed, Jan 11, 2017 at 6:01 PM, Odhiambo Washington <'odhia...@gmail.com'> wrote: Hi, I have broken my OS (FreeBSD) after upgrade, making me unable to compile dovecot the usual way so I am seeking a 3rd eye.

Re: Existing shared mailbox ... does not exist

2016-12-17 Thread Ruga
From dovecot's own log, a long stream of errors: [...] Error: /var/vmail/[example.com/username/shared/.foldername](http://example.com/isername/shared/.foldername) com/dovecot.index.pvt reset, view is now inconsistent

Re: Existing shared mailbox ... does not exist

2016-12-17 Thread Ruga
# 2.2.26.0 (23d1de6): /etc/dovecot/dovecot.conf auth_default_realm = example.com auth_mechanisms = cram-md5 auth_realms = example.com auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes auth_winbind_helper_path = default_client_limit = 256 default_internal_user = _dovecot

Re: Existing shared mailbox ... does not exist

2016-12-14 Thread Ruga
bump On Tue, Nov 8, 2016 at 5:49 PM, Ruga <'r...@protonmail.com'> wrote: Hello, Dovecot 2.2.26.0 Thunderbird 45.4.0 ESR Scenario: We have a shared mailbox with e-mails in its subdirectories. There are no e-mails in the shared mailbox itself. Example: /

Re: v2.2.27 released --- libressl

2016-12-06 Thread Ruga
Results from the application of the following patch from Aki. perl -i -ple 's|^(\s*#include \s*)$|$1\n\t#if OPENSSL_VERSION_NUMBER == 0x2000L\n\t#define OPENSSL_VERSION_NUMBER 0x10001000L\n\t#endif|' configure.ac; compiler-stderr.log Description: Binary data

Re: v2.2.27 released --- libressl

2016-12-04 Thread Ruga
>openssl version Libressl 2.4.4 Patch for dovecot: perl -i -ple 's/^(#if OPENSSL_VERSION_NUMBER < 0x1010L\s*)$/$1 || defined (LIBRESSL_VERSION_NUMBER)/' ./src/lib-dcrypt/dcrypt-openssl.c; perl -i -ple 's/^(#if OPENSSL_VERSION_NUMBER < 0x1010L\s*)$/$1 || defined

Re: v2.2.27 released

2016-12-04 Thread Ruga
var-expand.c:686:17: warning: passing an object that undergoes default argument promotion to 'va_start' has undefined behavior [-Wvarargs] va_start(args, key2); ^ var-expand.c:673:58: note: parameter of type 'char' is declared here var_expand_table_build(char key, const char *value, char

Re: JMAP support in Dovecot

2016-11-26 Thread Ruga
I am happy with IMAPS. Most of JMAP can be implemented as IMAPS incremental revisions.

Re: CPU for Dovecot

2016-11-26 Thread Ruga
> Xeon E5-2620v4 - 2,1GHz@8,0GT 20MB cache, 8core, HT, 85W, LGA2011 passmark: 16825 cost: 417$ > Xeon E5-2623v4 - 2,6GHz@8,0GT 10MB cache, 4core, HT, 85W, LGA2011 passmark: 8302 cost: 444$ I would get the first one. On Fri, Nov 25, 2016 at 2:29 PM, Miloslav Hůla <'miloslav.h...@gmail.com'>

Re: Good email client to use with Dovecot?

2016-11-22 Thread Ruga
Anyone using the default (TB) approach /Archive/-MM will eventually meet the problem of having too many folders and a slow service. The alternative, for the user, is to write their own filters. From the server side, it would be useful if dovecot would filter certain e-mails automatically.

Re: Good email client to use with Dovecot?

2016-11-19 Thread Ruga
TB is the closest thing to a functional Outlook replacement for office deployment. I have seen UN staff so distressed by IBM Lotus Notes that would have given someone else's left arm to have TB instead. I have mutt as a lifeboat, but is not good enough for daily use in office. On Mozilla not

Existing shared mailbox ... does not exist

2016-11-08 Thread Ruga
Hello, Dovecot 2.2.26.0 Thunderbird 45.4.0 ESR Scenario: We have a shared mailbox with e-mails in its subdirectories. There are no e-mails in the shared mailbox itself. Example: /Shared <--- empty /Shared/call_for_papers <-- empty

Re: v2.2.26.0 released

2016-11-02 Thread Ruga
.11.2016 12:39, Aki Tuomi wrote: >> Hi! >> >> Those are used if >> >> #if OPENSSL_VERSION_NUMBER >= 0x1010L >> >> So (your) libressl is providing this define. We compile our code using >> GCC and CLANG regularly, with OpenSSL v1.0.x which is the currently >>

Re: v2.2.26.0 released

2016-11-02 Thread Ruga
;> in dcrypt-openssl.c after includes. >>>> >>>> Aki >>>> >>>> >>>> On 02.11.2016 12:39, Aki Tuomi wrote: >>>>> Hi! >>>>> >>>>> Those are used if >>>>> >>>>> #if OPEN

Re: v2.2.26.0 released

2016-11-02 Thread Ruga
Mailing List <dovecot@dovecot.org>, Ruga <r...@protonmail.com> OpenSSL v1.0.1 is enough. Aki > On November 1, 2016 at 7:46 PM Ruga <r...@protonmail.com> wrote: > > > Hello, > > We cannot upgrade from 2.2.24, because we use libressl and the newer > dovecot versi

Re: v2.2.26.0 released

2016-11-01 Thread Ruga
Hello, We cannot upgrade from 2.2.24, because we use libressl and the newer dovecot versions demand openssl v1.1. Please add the new library requirement to the INSTALL file. All the best. Original Message Subject: v2.2.26.0 released Local Time: 28 October 2016 6:51 PM

Allow selection of safe curves in dovecot

2016-08-25 Thread Ruga
http://safecurves.cr.yp.to

Re: specifying elliptic curve

2016-08-22 Thread Ruga
+1 I opened a ticket (a while ago) to add manual selection of the curves. On Mon, Aug 22, 2016 at 6:59 PM, Aki Tuomi <'aki.tu...@dovecot.fi'> wrote: On 22.08.2016 16:21, İhsan Doğan wrote: > Hi, > > I've noticed that Dovecot is using per default the elliptic curve > sect571r1. Because not all

Re: Dovecot & Thunderbird on shared mbox

2016-08-19 Thread Ruga
at 1:04 PM, Aki Tuomi <'aki.tu...@dovecot.fi'> wrote: On 19.08.2016 14:00, Ruga wrote: > Occasional error from TB when selecting a dovecot's shared mbox: > > "Unable to open the summary file for [shared]" > "Perhaps there was an error on disk, or the full path is

Dovecot & Thunderbird on shared mbox

2016-08-19 Thread Ruga
Occasional error from TB when selecting a dovecot's shared mbox: "Unable to open the summary file for [shared]" "Perhaps there was an error on disk, or the full path is too long." The server's disk is clear, and the longest full path is [a-zA-Z\/\.]{46}. The error occurs occasionally.