Re: Need help with Cyrus certs on Ubun tu after upgrading from 18.04 to 20.04

Can you do

openssl x509 –noout –modulus –in /etc/ssl/certs/my-server.crt | openssl md5

openssl rsa –noout –modulus –in /etc/ssl/private/my-server.key | openssl md5

and see whether the output matches?

Then, is there in your /etc/ssl/certs directory another Cert file matching the metadata but has a different binary certificate?


On February 5, 2022 6:50:21 PM UTC, [email protected] wrote:
> cat /etc/imapd.conf | grep "tls_"
> tls_versions: tls1_0 tls1_1 tls1_2
> tls_client_ca_dir: /etc/ssl/certs
> tls_ciphers: TLSv1+HIGH:!aNULL: @STRENGTH
> tls_server_key: /etc/ssl/private/my-server.key
> tls_session_timeout: 1440
> tls_server_cert: /etc/ssl/certs/my-server.crt
> tls_client_ca_file: /etc/ssl/certs/my-server.crt
> ls -laZ /etc/ssl/private/my-server.key
> -rw-r----- 1 root ssl-cert ? 887 júl   25  2017 /etc/ssl/private/my-server.key
> ls -laZ /etc/ssl/certs/my-server.crt
> -rw-r--r-- 1 root root ? 899 jan   13  2020 /etc/ssl/certs/my-server.crt
> ls -laZ /etc/ssl/
> drwxr-xr-x   3 root root     ? 20480 febr   5 13:20 certs
> drwxr-x---   2 root ssl-cert ?  4096 júl   25  2017 private
> cat /etc/group | grep "ssl"
> ssl-cert:x:112:cyrus,postfix,openldap
> 
> cat /etc/passwd | grep "cyrus"
> cyrus:x:123:8:Cyrus Mailsystem User,,,:/var/spool/cyrus:/bin/sh

------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T095c648989aa4da2-Ma339c5d18a8144f0887f0faf
Delivery options: https://cyrus.topicbox.com/groups/info/subscription