Dovecot

Dovecot 設定

IMAPS (pam)

• /etc/dovecot

dovecot.conf

• protocols = imap

conf.d/10-auth.conf

• disable_plaintext_auth = no

conf.d/10-mail.conf

• mail_location = maildir:~/Maildir

conf.d/10-ssl.conf

# openssl dhparam -out /etc/dovecot/dh.pem 4096

• ssl = required
• ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
• ssl_key = </etc/pki/dovecot/private/dovecot.pem
• ssl_dh = </etc/dovecot/dh.pem
   

firewalld

• firewall-cmd --add-service=imaps --permanent
• firewall-cmd --reload
   

Error

imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters (ssl_dh setting): error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small

• see https://www.wetch.co.jp/dovecotをアップグレードしたら受信できなくなった/
• dovecot2.3から ssl-parameter.datファイルが廃止, ssl_dh を使用する．
  • openssl dhparam -out /etc/dovecot/dh.pem 4096
  • /etc/dovecot/conf.d/10-ssl.conf に ssl_dh = </etc/dovecot/dh.pem を追加
     

SSL なし POP3 (IPv4, shadow)

dovecot.conf

• protocols = pop3
• listen = *

conf.d/10-auth.conf

• disable_plaintext_auth = no

conf.d/10-mail.conf

• mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u
• mail_access_groups = mail

conf.d/10-ssl.conf

• ssl = no

conf.d/auth-system.conf.ext

• passdb { driver = shadow }