Dovecot on Debian

keefe007

Verified User
Joined
Dec 25, 2004
Messages
276
For those of you who have Debian, I wouldn't try this upgrade yet.

I tried to perform the upgrade via the instructions gave by DA. The install looked like it went fine, however, dovecot wil not start up right now. Upon trying to start the dovecot daemon I receive this error: Starting dovecot: ./dovecot: line 22: daemon: command not found

I'm still waiting to hear back from DA support.
 
Looks like a RedHat init script. I don't believe Debian uses the shell function daemon to start daemons, like RedHat does. You might be able to hack the script a little to be more Debian like.
 
I changed 'daemon dovecot' in the script to just 'dovecot' and now i'm getting this error:

Starting dovecot: Error: Can't use SSL certificate /etc/exim.cert: No such file or directory

Any ideas?
 
I generated a new .cert and .key with openssl and then I was getting this error:

"Fatal: listen(143) failed: Address already in use"

I did a netstat and noticed that imap2 was still running under inetd. I went into the inetd init script and commented out the line for imap. I then restart inetd and now nothing is listeing on port 143.

When I try to start dovecot now I just receive this message:

"Starting dovecot: "

Dovecot never starts.
 
Look in your /etc/exim.conf and see where the cert is, and make sure dovecot.conf points to the same certificate.
 
SSL errors in the logs.

If i commented out the SSL portion in both exim.conf and dovecot.conf why am I still getting this error:

Starting dovecot: Error: Can't use SSL certificate /etc/ssl/certs/dovecot.pem: No such file or directory
 
That's likely the hardcoded default which is used if there is no setting in the conf file.

If you disable the imaps and pop3s protocols (first line in the config file) you might be able to get that error to go away, but you should really generate a good cert/key so you can use ssl.
 
What's the correct way to generate a cert and key?

I was following these instructions -> http://homepage.mac.com/pauljlucas/personal/macmini/certs.html

and I always get this error:

openssl ca -policy policy_anything -out certs/server.crt -infiles tmp.pem
Using configuration from /usr/lib/ssl/openssl.cnf
Error opening CA private key /etc/ssl/private/cakey.pem
31655:error:02001002:system library:fopen:No such file or directory:bss_file.c:278:fopen('/etc/ssl/private/cakey.pem','r')
31655:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
unable to load CA private key

I never see a cakey.pem get created, though I do see cakey.key.
 
Alright, after a little tweaking i'm only left with this error:

openssl ca -policy policy_anything -out certs/server.crt -infiles tmp.pem
Using configuration from /usr/lib/ssl/openssl.cnf
Enter pass phrase for /etc/ssl/private/cakey.key:
unable to load number from /etc/ssl/serial
error while loading serial number
3991:error:0D066096:asn1 encoding routines:a2i_ASN1_INTEGER:short line:f_int.c:215:

The file serial does exist, but it is empty. What's suppose to generate that file? I had to create it myself.
 
Back
Top