Univention Bugzilla – Bug 50105
Error in template leads to wrong config
Last modified: 2019-09-18 13:23:26 CEST
In a customer environment with UCS 4.4-1e245 setting the CAcert results in mail/dovecot/ssl/cafile = /etc/ssl/certs/intermediate-ca.crt while the following was expected mail/dovecot/ssl/cafile = < /etc/ssl/certs/intermediate-ca.crt This leads into Validation problems while from the outside everything seems to be fine. It is not clear why a variable called 'file' should contain such a symbol. UCR clearly should handle this or at least give a clear hint to tthe Dovecot SSL config.
The expected value in the UCR variable could be documented better. Or, if the '<' is always working, it could be included in the template. Workaround for the time beeing is to simply include the < in the UCR value: ucr set mail/dovecot/ssl/cafile="< /path/to/cert"
Package: univention-mail-dovecot Version: 5.0.1-9A~4.4.0.201909131023 Branch: ucs_4.4-0 Scope: errata4.4-1 The < is now prepended by default in the template. If it is present in the UCRV it is striped from it.
If mail/dovecot/ssl/cafile is not set, there should be no "<" in the line. ssl_ca = vs. ssl_ca = < /path/to/file.crt If "ssl_ca = <" is set without trailing path, dovecot refuses to start. → REOPEN
If this is fixed, there might be problems with certificate sending mail clients and the let's encrypt app. See Bug 50192.
Package: univention-mail-dovecot Version: 5.0.1-10A~4.4.0.201909160928 Branch: ucs_4.4-0 Scope: errata4.4-1 fixed that doozy
OK: functional change OK: code change OK: installation OK: update ??: ucs-test OK: changelog entry OK: advisory OK: package built and installable
(In reply to Sönke Schwardt-Krummrich from comment #6) > ??: ucs-test Of course they failed. But not triggered by Ole's changes. It looks like there has been a) a dependency change so that python-support is no longer automatically installed during package build and b) debian/control of univention-mail-dovecot does not contain "python-support" in the build dependency list. Therefore the #DEBHELPER# part of the postinst script does not contain a update-python-modules call and the python files were no longer symlinked to python2.7. [4.4-1] d3d0afc671 Bug #50105: add python-support to build dependencies
Package: univention-mail-dovecot Version: 5.0.1-11A~4.4.0.201909171353 Branch: ucs_4.4-0 Scope: errata4.4-1
OK: d3d0afc6 build dependencies ~OK: Yaml, i adjusted the version and wording, Sönke gave his okay. OK: tests. Verified
<http://errata.software-univention.de/ucs/4.4/278.html>