Skip to content

OpenSuSE and apparmor expect dovecot certs to be in /etc/ssl/private

short description

ISPConfig setup script expects SSL certs to be in /etc/postfix but apparmor prevents dovecot from reading them in that directory.

correct behaviour

The certificates should be placed by ISPConfig.sh in /etc/ssl/private. By default apparmor allows dovecot read access there.

environment

Server OS: OpenSuSE
Server OS version: Leap 42.3 ISPConfig version: 3.1.12

If it might be related to the problem

insert the output of `nginx -v` or `apachectl -v` here
apachectl -v
Server version: Apache/2.4.23 (Linux/SUSE)
Server built:   2018-05-07 12:56:20.000000000 +0000

insert the output of `php -v` here
php -v
Created directory: /var/lib/net-snmp
Created directory: /var/lib/net-snmp/cert_indexes
Created directory: /var/lib/net-snmp/mib_indexes
PHP 5.5.14 (cli)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies

## proposed fix

## references
see https://www.howtoforge.com/community/threads/dovecot-doesnt-like-the-smtpd-cert-file-for-some-reason.79325/

## screenshots

## log entries