[Bug 1070761] New: After upgrade of Tumbleweed to 20171129 dovecot shows Unknown protocol 'SSLv2'
http://bugzilla.opensuse.org/show_bug.cgi?id=1070761 Bug ID: 1070761 Summary: After upgrade of Tumbleweed to 20171129 dovecot shows Unknown protocol 'SSLv2' Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: freek@opensuse.org QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- After upgrade of Tumbleweed to 20171129 dovecot shows the following messages: eiktum:~ # journalctl -b -u dovecot -- Logs begin at Fri 2017-12-01 11:14:54 CET, end at Fri 2017-12-01 11:29:40 CET. -- Dec 01 11:15:21 eiktum systemd[1]: Started Dovecot IMAP/POP3 email server. Dec 01 11:15:22 eiktum dovecot[1651]: master: Dovecot v2.2.33.2 (d6601f4ec) starting up for imap Dec 01 11:16:20 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:16:20 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 2 secs Dec 01 11:16:22 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:16:22 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 4 secs Dec 01 11:21:20 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:21:20 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 8 secs Dec 01 11:21:28 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:21:28 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 16 secs Dec 01 11:26:20 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:26:20 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 32 secs Dec 01 11:26:52 eiktum dovecot[1906]: imap-login: Fatal: Invalid ssl_protocols setting: Unknown protocol 'SSLv2' Dec 01 11:26:52 eiktum dovecot[1651]: master: Error: service(imap-login): command startup failed, throttling for 60 secs eiktum:~ # rpm -qa | grep openssl | sort libopenssl1_0_0-1.0.2m-1.1.x86_64 libopenssl1_1_0-1.1.0g-2.1.x86_64 openssl-1.1.0g-1.1.noarch openssl-1_1_0-1.1.0g-2.1.x86_64 eiktum:~ # I changed, what I think is the default, the line "ssl_protocols = !SSLv2 !SSLv3" in "ssl_protocols = !SSLv3". This solved the problem. Th bug is that the default should change. I assume it is caused by the upgrade of openssl. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1070761 http://bugzilla.opensuse.org/show_bug.cgi?id=1070761#c1 James Carlson <carlsonj@workingcode.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carlsonj@workingcode.com --- Comment #1 from James Carlson <carlsonj@workingcode.com> --- Original reporter's fix is correct. openssl-1.1 dropped all support for SSLv2, so it doesn't even claim to recognize the keyword anymore. The default ssl_protocols line just needs to be updated to remove any reference to SSLv2. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1070761 http://bugzilla.opensuse.org/show_bug.cgi?id=1070761#c2 Arjen de Korte <suse+build@de-korte.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse+build@de-korte.org --- Comment #2 from Arjen de Korte <suse+build@de-korte.org> --- https://build.opensuse.org/request/show/547762 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1070761 http://bugzilla.opensuse.org/show_bug.cgi?id=1070761#c4 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #4 from Christian Boltz <suse-beta@cboltz.de> --- Leap 15.1 also suffers from this problem, see bug 1134242 -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com