Hello all, I am using Dovecot with enabled SSL/TLS support on a Ubuntu 14.04 Server Trusty Tahr system. Dovecot in general works but it crashes when I try to establish a connection with enabled TLS. I have created a self signed certificate and a key with the following command: openssl req -new -x509 -days 3650 -nodes -newkey rsa:4096 -out /etc/ssl/certs/mail.pem -keyout /etc/ssl/private/mail.pem I configured this in Postfix and Dovecot. Postfix works fine with it. In both cases a tweaked the crypto settings a bit to have better ciphers, key-exchange ciphers and so on prefered. In Postfix all works well. My Dovecot SSL settings look like this (/etc/dovecot/conf.d/10-ssl.conf): ## ## SSL settings ## # SSL/TLS support: yes, no, required. ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert = ssl = yes # PEM encoded X.509 SSL/TLS certificate and private key. They're opened before # dropping root privileges, so keep the key file unreadable by anyone but # root. Included doc/mkcert.sh can be used to easily generate self-signed # certificate, just make sure to update the domains in dovecot-openssl.cnf ssl_cert = @localhost Dovecot crashes and in mail.log and mail.err the following appears: Dec 29 02:33:22 mailer dovecot: imap-login: Error: SSL: Stacked error: error:0608308E:digital envelope routines:EVP_PKEY_get1_EC_KEY:expecting a ec key Dec 29 02:33:22 mailer dovecot: imap-login: Fatal: Can't load ssl_cert: error:0906D06C:PEM routines:PEM_read_bio:no start line Dec 29 02:33:22 mailer dovecot: master: Error: service(imap-login): command startup failed, throttling for 2 secs I really don't understand what this trys to tell me. I googled the thing but could not find very much, I think it's not a configuration issue. The same certificate and key works with Postfix so it should be valid. Does someone know how to solve this? Best Regards

Ubuntudovecot package

History of question #259839

Ubuntu
dovecot package