Re: BUG-Report: mysql: SSL support not compiled in (remove ssl_client_ca_file and ssl_client_ca_dir settings) third attempt!

Klaus Tachtler via dovecot <[email protected]> Thu, 2 Apr 2026 14:19:17 +0200
Newsgroups gmane.mail.imap.dovecot
Message-ID <[email protected]>
Hi Timo,

it seems, that the cert chain file could be read -

openat(AT_FDCWD, 
"/etc/dovecot/ssl/certs/wildcard.idmz.tachtler.net.chain.pem", O_RDONLY) 
= 23
fstat(23, {st_mode=S_IFREG|0444, st_size=11627, ...}) = 0
read(23, "-----BEGIN PRIVATE 
KEY-----\nMIIEvgIBADANBgkqhkjG9w0BAQEFAASCBKgrggSkAgEAAoIBAZDkRF5N07iRZLw4\nUbXO8ah"..., 
4096) = 4096
read(23, " Identifier: \n 
8C:4E:9B:BA:1E:03:14:67:34:F0:B8:30:FE:24:AC:B2:23:C7:45:30\n 
"..., 4096) = 4096
read(23, "9:e7:7d:33:df:d3:95:2c:4b:3b:7c:\n 
a3:fa:5e:3a:29:72:f7:92:8d:30:b2:8f:73:34:f7:\n "..., 4096) = 3435
read(23, "", 4096)                      = 0
close(23)                               = 0

openat(AT_FDCWD, 
"/etc/dovecot/ssl/private/wildcard.idmz.tachtler.net.key.pem", O_RDONLY) 
= -1 EACCES (Permission denied)
close(22)

Greetings
Klaus.

On 4/2/26 14:07, Timo Sirainen wrote:
> On 2. Apr 2026, at 15.03, Klaus Tachtler <[email protected]> wrote:
>>
>> Hi Timo,
>>
>> now I have:
>>
>> service auth {
>>   executable = /usr/bin/strace -D -o /tmp/auth.strace -s 100
>> /usr/lib/dovecot/auth
>>   group = vmail
>>   user = vmail
>>   inet_listener auth {
>>     port = 12345
>>     listen = 10.0.0.80 fd00::10:10:0:0:80
>>   }
>> }
>>
>> The problem is, no strace file will be written?
>>
>> # ls -l /tmp/auth.strace
>> ls: cannot access '/tmp/auth.strace': No such file or directory
> 
> With systemd the /tmp directory is actually under /tmp/systemd-something/. Try find /tmp -name auth.strace or use some other directory than /tmp.
> 


-- 

---------------------------------------
e-Mail  : [email protected]
Homepage: https://www.tachtler.net
DokuWiki: https://dokuwiki.tachtler.net
---------------------------------------
_______________________________________________
dovecot mailing list -- [email protected]
To unsubscribe send an email to [email protected]