Dovecot の履歴(No.3)

• 履歴一覧
• 差分 を表示
• 現在との差分 を表示
• ソース を表示
• Dovecot へ行く。
  • 1 (2024-12-17 (火) 18:29:49)
  • 2 (2025-03-21 (金) 11:01:16)
  • 3 (2025-03-21 (金) 11:01:45)

Dovecot[edit]

• IMAP, POP3 サーバ

Dovecot 設定†[edit]

IMAPS (pam)†[edit]

• /etc/dovecot

dovecot.conf†[edit]

• protocols = imap

conf.d/10-auth.conf†[edit]

• disable_plaintext_auth = no

conf.d/10-mail.conf†[edit]

• mail_location = maildir:~/Maildir

conf.d/10-ssl.conf†[edit]

# openssl dhparam -out /etc/dovecot/dh.pem 4096

• ssl = required
• ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
• ssl_key = </etc/pki/dovecot/private/dovecot.pem
• ssl_dh = </etc/dovecot/dh.pem

firewalld†[edit]

• firewall-cmd --add-service=imaps --permanent
• firewall-cmd --reload

Error†[edit]

* imap-login: Error: Failed to initialize SSL server context: Can't load DH parameters (ssl_dh setting): error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small†[edit]

• see https://www.wetch.co.jp/dovecot%E3%82%92%E3%82%A2%E3%83%83%E3%83%97%E3%82%B0%E3%83%AC%E3%83%BC%E3%83%89%E3%81%97%E3%81%9F%E3%82%89%E5%8F%97%E4%BF%A1%E3%81%A7%E3%81%8D%E3%81%AA%E3%81%8F%E3%81%AA%E3%81%A3%E3%81%9F/
• dovecot2.3から ssl-parameter.datファイルが廃止, ssl_dh を使用する．
  • openssl dhparam -out /etc/dovecot/dh.pem 4096
  • /etc/dovecot/conf.d/10-ssl.conf に ssl_dh = </etc/dovecot/dh.pem を追加

SSL なし POP3 (IPv4, shadow)†[edit]

dovecot.conf†[edit]

• protocols = pop3
• listen = *

conf.d/10-auth.conf†[edit]

• disable_plaintext_auth = no

conf.d/10-mail.conf†[edit]

• mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u
• mail_access_groups = mail

conf.d/10-ssl.conf†[edit]

• ssl = no

conf.d/auth-system.conf.ext†[edit]

• passdb { driver = shadow }