Re: BUG-Report: mysql: SSL support not compiled in (remove ssl_client_ca_file and ssl_client_ca_dir settings) third attempt!

> On 2. Apr 2026, at 12.33, Timo Sirainen via dovecot <[email protected]> wrote:
> 
> On 2. Apr 2026, at 12.14, Klaus Tachtler via dovecot <[email protected]> wrote:
>> ssl_client_key_file = /etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem
>> 
>> dovecot[9510]: auth: Error: mysql(db.idmz.tachtler.net): Connect failed to database (postfixadmin): File '/etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem' not found (Errcode: -280287320) - waiting for 1 seconds before retry
>> 
>> 5 times inside the log.
>> 
>> However, the file does exist:
>> 
>> # ls -la /etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem
>> -r-------- 1 dovecot dovecot 1703 Feb 27 09:55 /etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem
>> 
>> I had already set the ownership to root:root, but the key file is still not found, even though it's definitely there.
> 
> By default auth process runs as default_internal_user = dovecot user. Maybe mariadb library gives "not found" error instead of the correct "permission denied" error. Try changing its owner to dovecot, or setting service auth { user=root }

Oh, didn't read properly the ls -l line. Could it be the parent directories are not accessible to dovecot user?

As for:

> dovecot[9974]: lmtp(10078): Warning: Leaked settings: ssl-settings.c:234
> dovecot[9974]: lmtp(10078): Warning: Leaked settings: ssl-settings.c:231

I don't see how these can happen based on the code. What's your doveconf -n? Are you connecting to LMTP using SSL?

_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]