Description of problem: mga7 dev0 Snippet from # cat /var/log/dovecot/errors.log master: Warning: Killed with signal 15 (by pid=28393 uid=0 code=kill) config: Warning: please set ssl_dh=</etc/dovecot/dh.pem Jconfig: Warning: You can generate it with: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh -inform der > /etc/dovecot/dh.pem So I pasted it in a root terminal # dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh -inform der > /etc/dovecot/dh.pem 142+0 records in 142+0 records out 142 bytes copied, 0.000124657 s, 1.1 MB/s Invalid command 'dh'; type "help" for a list. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. As root, dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh -inform der > /etc/dovecot/dh.pem
Assignee: bugsquad => mageia
man openssl tells me dh is obsoleted and replaced by dhparam. The config states: # SSL DH parameters # Generate new params with `openssl dhparam -out /etc/dovecot/dh.pem 4096` # Or migrate from old ssl-parameters.dat file with the command dovecot # gives on startup when ssl_dh is unset. #ssl_dh = </etc/dovecot/dh.pem So the "main" problem is, our version of openssl already obsoleted dh, but dhparam works. I'll push a patch, so users don't get irritated. New package is building, but it changes only the output.
Resolution: (none) => FIXEDStatus: NEW => RESOLVED