[Pkg-openssl-devel] Bug#334180: dovecot-imapd: ssl_cipher_list = ALL:!LOW does not work either

Jari Aalto jari.aalto at cante.net
Tue Oct 25 18:26:34 UTC 2005


| > It's in /usr/lib/dovecot/imap-login, with those changes in
| > /etc/dovecot/dovecot.conf I ran /et/init.d./dovecot start. Results
| > attached.
| 
| Looks like it's just opening the certificate file. Opens and reads it 
| correctly. Then complains that it can't load it (the strace is missing 
| the full string, but I assume that's the "couldn't load shared library" 
| error). It does nothing that even tries to load shared libraries or 
| look for any files or anything.

Yes the strtace is stange. It should be able to load the file:

    root at host:~# ls -l /etc/ssl/certs/dovecot.pem
    -rw-r--r--  1 root dovecot 1119 2004-10-02 19:07 /etc/ssl/certs/dovecot.pem

The full error in in the mail.info log (broken here in lines):

    Oct 25 21:20:51 cante dovecot: imap-login: Can't load
    certificate file /etc/ssl/certs/dovecot.pem:
    error:25066067:DSO support routines:DLFCN_LOAD:could not
    load the shared library

Let me know what else should I check next,
Jari

...
stat64("/usr/lib/i686/cmov", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
open("/usr/lib/i686/libz.so", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/lib/i686", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
open("/usr/lib/cmov/libz.so", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/lib/cmov", 0xbfd0ffd0)     = -1 ENOENT (No such file or directory)
open("/usr/lib/libz.so", O_RDONLY)      = -1 ENOENT (No such file or directory)
stat64("/usr/lib", {st_mode=S_IFDIR|0755, st_size=40960, ...}) = 0
munmap(0xb7ef5000, 30204)               = 0
open("/etc/ssl/certs/dovecot.pem", O_RDONLY|O_LARGEFILE) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1119, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7efc
000
read(5, "-----BEGIN CERTIFICATE-----\nMIID"..., 4096) = 1119
close(5)                                = 0
munmap(0xb7efc000, 4096)                = 0
write(2, "\1FCan\'t load certificate file /e"..., 139) = 139




More information about the Pkg-openssl-devel mailing list