Re: Need help with Cyrus certs on Ubuntu after upgrading from 18.04 to 20.04

["Pascal Gienger via Info" <info@xxxxxxxxxxxxxxxxxx>]

Can you do

openssl x509 –noout –modulus –in /etc/ssl/certs/my-server.crt | openssl md5

openssl rsa –noout –modulus –in /etc/ssl/private/my-server.key | openssl md5

and see whether the output matches?

Then, is there in your /etc/ssl/certs directory another Cert file matching the metadata but has a different binary certificate?

On February 5, 2022 6:50:21 PM UTC, bsh@xxxxxxxxxxx wrote:

cat /etc/imapd.conf | grep "tls_"

tls_versions: tls1_0 tls1_1 tls1_2
tls_client_ca_dir: /etc/ssl/certs
tls_ciphers: TLSv1+HIGH:!aNULL: @STRENGTH
tls_server_key: /etc/ssl/private/my-server.key
tls_session_timeout: 1440
tls_server_cert: /etc/ssl/certs/my-server.crt
tls_client_ca_file: /etc/ssl/certs/my-server.crt

ls -laZ /etc/ssl/private/my-server.key

-rw-r----- 1 root ssl-cert ? 887 júl   25  2017 /etc/ssl/private/my-server.key

ls -laZ /etc/ssl/certs/my-server.crt

-rw-r--r-- 1 root root ? 899 jan   13  2020 /etc/ssl/certs/my-server.crt

ls -laZ /etc/ssl/

drwxr-xr-x   3 root root     ? 20480 febr   5 13:20 certs
drwxr-x---   2 root ssl-cert ?  4096 júl   25  2017 private

cat /etc/group | grep "ssl"

ssl-cert:x:112:cyrus,postfix,openldap

cat /etc/passwd | grep "cyrus"

cyrus:x:123:8:Cyrus Mailsystem User,,,:/var/spool/cyrus:/bin/sh

Cyrus / Info / see discussions + participants + delivery options Permalink