Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Michael Felt
On 8/11/2017 1:29 PM, Ralph Seichter wrote: On 11.08.2017 11:36, Michael Felt wrote: This is what Ralph means when he says "have been running a CA for 15+ years" - not that he is (though he could!) sell certificates commercially - rather, he is using an initial certificate to sign later certi

Re: /var/run/dovecot permission issues

2017-08-18 Thread Alexander Moisseev
On 8/17/2017 7:07 PM, Larry Rosenman wrote: In /usr/local/etc/dovecot/conf.d/90-plugin.conf: It should be enough to just set permissions as other options are defaults. /usr/local/etc/dovecot/conf.d/10-master.conf : service stats { fifo_listener stats-mail { mode = 0666 } fifo_liste

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread voytek
On Fri, August 18, 2017 5:02 pm, Michael Felt wrote: > On 8/11/2017 1:29 PM, Ralph Seichter wrote: >>> And, Ralph, I salute you. I have never been able to be disciplined >>> enough to be my own CA. >> I encourage you to look into the subject again. >> > I actually have been, which is why I could g

Re: is a self signed certificate always invalid the first time

2017-08-18 Thread Joseph Tam
Michael Felt writes: I use acme.sh for all of my LetsEncrypt certs (web & mail), it is written in pure shell script, so no python dependencies. https://github.com/Neilpang/acme.sh Thanks - I might look at that, but as Ralph mentions in his reply - Let's encrypt certs are only for three months

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Michael Felt
On 8/18/2017 9:12 AM, voy...@sbt.net.au wrote: On Fri, August 18, 2017 5:02 pm, Michael Felt wrote: On 8/11/2017 1:29 PM, Ralph Seichter wrote: And, Ralph, I salute you. I have never been able to be disciplined enough to be my own CA. I encourage you to look into the subject again. I actua

Re: is a self signed certificate always invalid the first time

2017-08-18 Thread Stephan von Krawczynski
On Fri, 18 Aug 2017 00:24:39 -0700 (PDT) Joseph Tam wrote: > Michael Felt writes: > > >> I use acme.sh for all of my LetsEncrypt certs (web & mail), it is > >> written in pure shell script, so no python dependencies. > >> https://github.com/Neilpang/acme.sh > > > > Thanks - I might look at th

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 18 Aug 2017, voy...@sbt.net.au wrote: BUT, for a public web server where https is becoming mandatory, I'd still need a certificate from a recognized publisher, to avoid users geting 'warnings', is that so ? As Michael wrote already, it's t

Re: is a self signed certificate always invalid the first time

2017-08-18 Thread Joseph Tam
Obviously you do not use clustered environments with more than one node per service. Else you would not call it "it just works", because in fact the renewal is quite big bs as one node must do the job while all the others must be _offline_. I'm not sure how you have set up your clustered serv

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Noel Butler
On 18/08/2017 17:12, voy...@sbt.net.au wrote: > BUT, for a public web server where https is becoming mandatory, I'd still > need a certificate from a recognized publisher, to avoid users geting > 'warnings', is that so ? > > (I'm currently using self issued for both mail and web) > > thanks, >

Re: Dovecot mail_location for fedora

2017-08-18 Thread Noel Butler
On 18/08/2017 06:15, Randy Gordey wrote: > What is the syntax for dovecot mail_location when postfix delivers mail to > /var/spool/mail/? > > These are the old unix style mbox, one file per user. > > Not setting mail_location in 10-mail.conf results in Auto not finding it. > > mbox: /var/spool/

Re: Dovecot mail_location for fedora

2017-08-18 Thread Aki Tuomi
mail_location=~/.mail:INBOX=/var/spool/mail/%Ln Aki On 18.08.2017 12:41, Noel Butler wrote: > On 18/08/2017 06:15, Randy Gordey wrote: > >> What is the syntax for dovecot mail_location when postfix delivers mail to >> /var/spool/mail/? >> >> These are the old unix style mbox, one file per user. >

Re: Dovecot mail_location for fedora

2017-08-18 Thread Noel Butler
Ahh thats it :) He should be good now, no idea why a fedora install wouldn't have that On 18/08/2017 19:43, Aki Tuomi wrote: > mail_location=~/.mail:INBOX=/var/spool/mail/%Ln > > Aki -- Kind Regards, Noel Butler This Email, including any attachments, may contain legally

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Ralph Seichter
On 18.08.2017 08:58, Michael Felt wrote: > as Ralph mentions in his reply - Let's encrypt certs are only for > three months - never ending circus. I don't consider the 90-day-lifespan a "circus". It is meant as a security feature[1], and Let's Encrypt suggests using automation for certificate ren

Re: is a self signed certificate always invalid the first time?

2017-08-18 Thread Ralph Seichter
On 18.08.2017 09:12, voy...@sbt.net.au wrote: > for a public web server where https is becoming mandatory, I'd still > need a certificate from a recognized publisher, to avoid users geting > 'warnings', is that so ? For a certificate to be reported as "valid", an unbroken chain of cryptographic s

Re: dotlock causing crashes

2017-08-18 Thread Aki Tuomi
On 16.08.2017 21:17, Ian Bobbitt wrote: > OS: CentOS 7 x86_64 > Dovecot version: 2.2.31 (65cde28) (GhettoForge RPM) > Filesystem: GlusterFS, but working on changing that. Only one server is > receiving activity. > > Was getting messages about corrupt dovecot.map.index files. Changed to > dotloc

Inconsistency in map index

2017-08-18 Thread Webert de Souza Lima
Hello, The following errors are constantly popping up for 2 accounts. I can't get it fixed, I did doveadm backup to another account, the same happens in the new account. I did doveadm force-resync, the problem persists. I'm using dovecot 2.2. 2017-08-18T11:46:12.472821881Z Aug 18 11:46:12 lmtp(r

Re: Inconsistency in map index

2017-08-18 Thread Aki Tuomi
On 18.08.2017 14:55, Webert de Souza Lima wrote: > Hello, > > The following errors are constantly popping up for 2 accounts. I can't get > it fixed, > I did doveadm backup to another account, the same happens in the new > account. > I did doveadm force-resync, the problem persists. > > I'm using

Filter of old Thunderbird installation interferes with lmtp/ Mail delivery / sieve

2017-08-18 Thread Jürgen Gmach
# 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 4.9.25 i686 Gentoo Base System release 2.2 # pidgeonhole v0.4.3 # Thunderbird 3.0.4 impact -- Emails, for which the filter applies, gets copied to the desired folder, but get kept in the inbox with deleted flag (in Roundcube you see them graye

Re: /var/run/dovecot permission issues

2017-08-18 Thread Bill Shirley
I'm glad to read this thread. I didn't even know that dovecot stats existed. Which statistics do you find most useful? Bill On 8/17/2017 3:31 PM, Matt Simpson wrote: On Aug 17, 2017, at 12:07 PM, Larry Rosenman wrote: In /usr/local/etc/dovecot/conf.d/90-plugin.conf: Thanks. Those config s

Re: Inconsistency in map index

2017-08-18 Thread Webert de Souza Lima
Oh, so that's likely a bug. I was thinking it would require manual intervention to fix. Great, I'll do an upgrade ASAP. Praised be Docker. Thank you very much. Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* On Fri, Aug 18, 2017 at 9:03 AM, Aki Tuomi wrote:

Re: Inconsistency in map index

2017-08-18 Thread Webert de Souza Lima
On Fri, Aug 18, 2017 at 9:03 AM, Aki Tuomi wrote: > This is fixed in next release (2.2.32) with > https://github.com/dovecot/core/commit/c8be394 > > Aki Tuomi > As this is still a release candidate, I'm thinking of running an isolated instance of this version, and do doveadm force-resync just to

Re: Install locks up my server

2017-08-18 Thread Marc Perkel
This is still broken in the 2.2.32 release candidate. config.guess forks copies till the server dies. Running Centos 6.6 under OpenVZ. On 06/26/17 16:03, Marc Perkel wrote: On 06/26/17 14:42, Timo Sirainen wrote: On 26 Jun 2017, at 23.19, Marc Perkel wrote: Ever since 2.26 I haven't been ab

Re: Install locks up my server

2017-08-18 Thread Timo Sirainen
No idea. config.guess is generated by autotools, so I don't think I can really affect it anyway. Also it works fine at least in CentOS 6.7 & 6.9. My guess is also that it might work ok in CentOS 6.6 and the brokenness is somehow specific to your system. > On 18 Aug 2017, at 18.43, Marc Perkel

Re: Inconsistency in map index

2017-08-18 Thread Timo Sirainen
On 18 Aug 2017, at 16.43, Webert de Souza Lima wrote: > > On Fri, Aug 18, 2017 at 9:03 AM, Aki Tuomi wrote: > >> This is fixed in next release (2.2.32) with >> https://github.com/dovecot/core/commit/c8be394 >> >> Aki Tuomi >> > > As this is still a release candidate, I'm thinking of running

Re: Inconsistency in map index

2017-08-18 Thread Webert de Souza Lima
On Fri, Aug 18, 2017 at 1:30 PM, Timo Sirainen wrote: > > That would work. Also as a different workaround you could just rm > storage/dovecot.map.index* and doveadm force-resync -u user@domain '*'. Thank you Timo, that did the trick without the need of a sudden upgrade. Mailbox was fixed :)

Re: Dovecot mail_location for fedora

2017-08-18 Thread Joseph Tam
mail_location=~/.mail:INBOX=/var/spool/mail/%Ln He should be good now, no idea why a fedora install wouldn't have that Unless I missed something in a previous pst, "~/.mail" is not typical for personal mail folder, but "~/mail" is. Joseph Tam

Permission denied to access the email file

2017-08-18 Thread ATHANASE Jean-René
Hi, Dovecot version : 2.2.22 (fe789d2) Operating system : DISTRIB_ID=Ubuntu DISTRIB_RELEASE=16.04 DISTRIB_CODENAME=xenial DISTRIB_DESCRIPTION="Ubuntu 16.04.2 LTS" CPU architecture : Linux 4.4.67-1-pve #1 SMP PVE 4.4.67-92 (Fri, 23 Jun 2017 08:22:06 +0200) x86_64 GNU/Linux FIle s

Re: Dovecot mail_location for fedora

2017-08-18 Thread Noel Butler
On 19/08/2017 07:17, Joseph Tam wrote: > mail_location=~/.mail:INBOX=/var/spool/mail/%Ln > He should be good now, no idea why a fedora install wouldn't have that Unless I missed something in a previous pst, "~/.mail" is not typical for personal mail folder, but "~/mail" is. Joseph Tam I thou

\Noselect isn't set on namespace prefix mailbox that can't be selected

2017-08-18 Thread David Mandelberg
Hi, I tried using Nextcloud's Mail app to access my dovecot server (version: 2.2.27 (c0f36b0)), and got an error. The relevant imap log is: C: 3 LIST () "" (*) RETURN (SPECIAL-USE) ... S: * LIST () "/" Archives ... C: 6 STATUS Archives (MESSAGES) S: 6 NO Mailbox isn't selectable (0.000 + 0.000