Debian Bug report logs - #631257
package rewrites SSL certificates

Package: dovecot-core; Maintainer for dovecot-core is Dovecot Maintainers <jaldhar-dovecot@debian.org>; Source for dovecot-core is src:dovecot (PTS, buildd, popcon).

Reported by: "Dmitry E. Oboukhov" <unera@debian.org>

Date: Wed, 22 Jun 2011 07:57:02 UTC

Severity: grave

Tags: patch

Merged with 685896

Fixed in version dovecot/1:2.1.7-3

Done: jaldhar@debian.org (Jaldhar H. Vyas)

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#631257; Package dovecot-imapd. (Wed, 22 Jun 2011 07:57:05 GMT) (full text, mbox, link).

Acknowledgement sent to "Dmitry E. Oboukhov" <unera@debian.org>:
New Bug report received and forwarded. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Wed, 22 Jun 2011 07:57:05 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Package: dovecot-imapd
Version: 1:2.0.13-1

I have been using dovecot for a long time.
Today I've upgraded it again upto wheezy and it again rewrited my SSL
certs (/etc/ssl/certs/dovecot.pem and /etc/ssl/private/dovecot.pem).
These certificates were generated a few years ago and many people use
them so this behaviour is very annoyed.

Could You modify Your scripts (to not to do that if these files are
present) or add debconf dialog to ask user's permissions before this
certificate will be rewritten?

-- 

. ''`.                               Dmitry E. Oboukhov
: :’  :   email: unera@debian.org jabber://UNera@uvw.ru
`. `~’              GPGKey: 1024D / F8E26537 2006-11-21
  `- 1B23 D4F8 8EC0 D902 0555  E438 AB8C 00CF F8E2 6537

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#631257; Package dovecot-imapd. (Sat, 17 Mar 2012 07:09:03 GMT) (full text, mbox, link).

Acknowledgement sent to Matthew Hall <mhall@mhcomputing.net>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Sat, 17 Mar 2012 07:09:03 GMT) (full text, mbox, link).

Message #10 received at 631257@bugs.debian.org (full text, mbox, reply):

I have some more context on this bug from looking over the postinst script.

1) The script's check for the existence of SSL_CERT and SSL_KEY is improper 
because the user could be placing them in different paths from what's expected 
and breaking the [ -e $SSL_CERT ] && [ -e $SSL_KEY ] .

In my case I named my private key with suffix '.key' and the postinst 
destroyed my private key for my working certificate. Many packages and people 
name their certificate with '.key' so I don't think this is a reasonable thing 
to do.

2) It should check for one or the other and at most issue a warning in case 
the user picked a different name, instead of blindly overwriting an existing 
one, or it should warn and prompt before overwriting an existing cert half or 
cert pair.

3) Isn't using /dev/urandom instead of /dev/random also risking an insecure 
certificate? Obviously most people who care would not use a self signed one 
but I think the question should at least be asked.

Regards,
Matthew.

From /var/lib/dpkg/info/dovecot-core.postinst:

  ## SSL Certs
  # Certs and key file
  SSL_CERT="/etc/ssl/certs/dovecot.pem"
  SSL_KEY="/etc/ssl/private/dovecot.pem"

  # Generate new certs if needed
  if [ -e $SSL_CERT ] && [ -e $SSL_KEY ]; then
    echo "You already have ssl certs for dovecot."
  else
    echo "Creating generic self-signed certificate: $SSL_CERT"
    echo "This certificate will expire in 10 years."
    echo "(replace with hand-crafted or authorized one if needed)."
    cd /etc/ssl/certs
    PATH=$PATH:/usr/bin/ssl
    if ! FQDN="$(hostname -f)"; then
        FQDN="$(hostname)"
        echo WARNING: Could not get FQDN, using \"$FQDN\".
    fi
    MAILNAME="$(cat /etc/mailname 2> /dev/null || echo "$FQDN")"
    (openssl req -newkey rsa:2048  -x509 -days 3652.5 -nodes \
        -rand /dev/urandom -out $SSL_CERT -keyout $SSL_KEY > /dev/null 2>&1 <<+
.
.
.
Dovecot mail server
$FQDN
$FQDN
root@$MAILNAME
+
    ) || echo "Warning : Bad SSL config, can't generate certificate."
  fi

  ucfr dovecot-core $SSL_CERT
  ucfr dovecot-core $SSL_KEY

  if [ ! -h $SSL_CERT ] && [ ! -h $SSL_KEY ]; then
    chown root:dovecot $SSL_CERT || true
    chmod 0644 $SSL_CERT || true
    chown root:dovecot $SSL_KEY || true
    chmod 0600 $SSL_KEY || true
  fi

fi

Severity set to 'grave' from 'normal' Request was from Ben Hutchings <ben@decadent.org.uk> to control@bugs.debian.org. (Tue, 20 Mar 2012 03:06:02 GMT) (full text, mbox, link).

Acknowledgement sent to Jörg-Volker Peetz <jvpeetz@web.de>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Sat, 28 Jul 2012 08:06:04 GMT) (full text, mbox, link).

Message #17 received at 631257@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Package: dovecot-core
Version: 1:2.1.7-2

As a user of dovecot-imapd I would like to suggest a fix for the dovecot-core
postinst script, please see attached patch.

-- 
Best regards,
Jörg-Volker.

[dovecot-core.postinst.patch (text/x-diff, attachment)]

Bug reassigned from package 'dovecot-imapd' to 'src:dovecot'. Request was from Alexander Ufimtsev <alexu@ucd.ie> to control@bugs.debian.org. (Sat, 08 Sep 2012 17:45:03 GMT) (full text, mbox, link).

No longer marked as found in versions dovecot/1:2.1.7-2 and dovecot/1:2.0.13-1. Request was from Alexander Ufimtsev <alexu@ucd.ie> to control@bugs.debian.org. (Sat, 08 Sep 2012 17:45:03 GMT) (full text, mbox, link).

Added tag(s) patch. Request was from Alexander Ufimtsev <alexu@ucd.ie> to control@bugs.debian.org. (Sat, 08 Sep 2012 17:45:04 GMT) (full text, mbox, link).

Merged 631257 685896 Request was from Alexander Ufimtsev <alexu@ucd.ie> to control@bugs.debian.org. (Sat, 08 Sep 2012 17:45:05 GMT) (full text, mbox, link).

Added tag(s) pending. Request was from Ulrich Dangel <uli@debian.org> to control@bugs.debian.org. (Sat, 08 Sep 2012 18:33:08 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#631257; Package src:dovecot. (Sat, 08 Sep 2012 18:42:02 GMT) (full text, mbox, link).

Acknowledgement sent to Ulrich Dangel <uli@debian.org>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Sat, 08 Sep 2012 18:42:02 GMT) (full text, mbox, link).

Message #32 received at 631257@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

tags 685896 + pending
tags 631257 + pending
thanks

Dear maintainer,

I've prepared an NMU for dovecot (versioned as 1:2.1.7-2.1) and
uploaded it to DELAYED/3. Please feel free to tell me if I
should delay it longer.

Regards.

[dovecot-2.1.7-2.1-nmu.diff (text/x-diff, attachment)]

Acknowledgement sent to "Jaldhar H. Vyas" <jaldhar@debian.org>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Sat, 08 Sep 2012 18:57:14 GMT) (full text, mbox, link).

Message #37 received at 631257@bugs.debian.org (full text, mbox, reply):

On Sat, 8 Sep 2012, Ulrich Dangel wrote:

> tags 685896 + pending
> tags 631257 + pending
> thanks
>
> Dear maintainer,
>
> I've prepared an NMU for dovecot (versioned as 1:2.1.7-2.1) and
> uploaded it to DELAYED/3. Please feel free to tell me if I
> should delay it longer.
>

Actually you can cancel it.  After a long bout of inactivity I'm working 
on a new revision of the package and I will fold your changes into it.  If 
you like, you can make future changes directly into a branch of the 
dovecot git repository.  (It's in collab-maint so you should already have 
access.)

-- 
Jaldhar H. Vyas <jaldhar@debian.org>
La Salle Debain - http://www.braincells.com/debian/

Message #42 received at 631257@bugs.debian.org (full text, mbox, reply):

* Jaldhar H. Vyas wrote [08.09.12 20:47]:

> Actually you can cancel it.  After a long bout of inactivity I'm
> working on a new revision of the package and I will fold your
> changes into it.  

Ok great, i just canceled it!

> If you like, you can make future changes directly
> into a branch of the dovecot git repository.  (It's in collab-maint
> so you should already have access.)

Yeah i wasn't really sure what's considered good practice so I decided
to just upload it to delayed.

Thanks for taking care of the bug.

cheers,
Ulrich

Bug reassigned from package 'src:dovecot' to 'dovecot-core'. Request was from "Jaldhar H. Vyas" <jaldhar@debian.org> to control@bugs.debian.org. (Sun, 30 Sep 2012 06:24:04 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#631257; Package dovecot-core. (Wed, 31 Oct 2012 17:00:05 GMT) (full text, mbox, link).

Acknowledgement sent to intrigeri <intrigeri@boum.org>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Wed, 31 Oct 2012 17:00:05 GMT) (full text, mbox, link).

Message #49 received at 631257@bugs.debian.org (full text, mbox, reply):

Hi Dovecot maintainers!

Ulrich Dangel wrote (08 Sep 2012 23:11:34 GMT) :
> * Jaldhar H. Vyas wrote [08.09.12 20:47]:

>> Actually you can cancel it.  After a long bout of inactivity I'm
>> working on a new revision of the package and I will fold your
>> changes into it.  

> Ok great, i just canceled it!

All reproducible RC bugs against dovecot have been fixed in Git for
a month. Can we expect a package suitable for a freeze unblock request
to be uploaded any time soon?

Thank you for maintaining Dovecot in Debian!

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc

Information forwarded to debian-bugs-dist@lists.debian.org, Dovecot Maintainers <jaldhar-dovecot@debian.org>:
Bug#631257; Package dovecot-core. (Thu, 08 Nov 2012 06:09:03 GMT) (full text, mbox, link).

Acknowledgement sent to "Jaldhar H. Vyas" <jaldhar@debian.org>:
Extra info received and forwarded to list. Copy sent to Dovecot Maintainers <jaldhar-dovecot@debian.org>. (Thu, 08 Nov 2012 06:09:03 GMT) (full text, mbox, link).

Message #54 received at 631257@bugs.debian.org (full text, mbox, reply):

On Wed, 31 Oct 2012, intrigeri wrote:

> All reproducible RC bugs against dovecot have been fixed in Git for
> a month. Can we expect a package suitable for a freeze unblock request
> to be uploaded any time soon?

Actually #665407 revealed an issue that is imperetive to fix for the 
upload can happen.  Hopefully we will get to the bottom of it very soon.

-- 
Jaldhar H. Vyas <jaldhar@debian.org>

Reply sent to jaldhar@debian.org (Jaldhar H. Vyas):
You have taken responsibility. (Sat, 10 Nov 2012 09:51:12 GMT) (full text, mbox, link).

Notification sent to "Dmitry E. Oboukhov" <unera@debian.org>:
Bug acknowledged by developer. (Sat, 10 Nov 2012 09:51:12 GMT) (full text, mbox, link).

Message #59 received at 631257-close@bugs.debian.org (full text, mbox, reply):

Source: dovecot
Source-Version: 1:2.1.7-3

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 631257@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jaldhar H. Vyas <jaldhar@debian.org> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 10 Nov 2012 03:50:30 -0500
Source: dovecot
Binary: dovecot-common dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-dbg
Architecture: source all i386
Version: 1:2.1.7-3
Distribution: unstable
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Jaldhar H. Vyas <jaldhar@debian.org>
Description: 
 dovecot-common - Transitional package for dovecot
 dovecot-core - secure mail server that supports mbox, maildir, dbox and mdbox ma
 dovecot-dbg - debug symbols for Dovecot
 dovecot-dev - header files for the dovecot mail server
 dovecot-gssapi - GSSAPI authentication support for Dovecot
 dovecot-imapd - secure IMAP server that supports mbox, maildir, dbox and mdbox ma
 dovecot-ldap - LDAP support for Dovecot
 dovecot-lmtpd - secure LMTP server for Dovecot
 dovecot-managesieved - secure ManageSieve server for Dovecot
 dovecot-mysql - MySQL support for Dovecot
 dovecot-pgsql - PostgreSQL support for Dovecot
 dovecot-pop3d - secure POP3 server that supports mbox, maildir, dbox and mdbox ma
 dovecot-sieve - sieve filters support for Dovecot
 dovecot-solr - Solr full text search support for Dovecot
 dovecot-sqlite - SQLite support for Dovecot
Closes: 601744 608719 623440 631257 665487 679017 680035 680992 685850 685896 686931 688197 688407 692632
Changes: 
 dovecot (1:2.1.7-3) unstable; urgency=high
 .
   [ Jaldhar H. Vyas ]
   * [03d5499] Do not generate new dovecot cert if key or cert is already
     present (Closes: #685896,#631257) Thanks to Alexander Ufimtsev
     <alexu@ucd.ie> and Jörg-Volker Peetz <jvpeetz@web.de> for patches.
   * [5be6c2a] You should be able to upgrade and remove dovecot-managesieved
     without errors (Closes: #665487)
   * [1a9ad5c] Fixes instances where UTF-8 was misused instead of mUTF-7
     (Closes: #680035)
   * [c0ac3ba] Backport of fix for failure to autocreate mailboxes
     (Closes: #623440) This also requires setting the default mail_location.
   * [ba1d3f5] Fix FTBS on Hurd (Closes: #686931) via upstream patch backported
     from mercurial.
   * [cfa92b5] Upgrade pigeonhole page to 0.3.1 (Closes: #688407)
   * [58f01c2] Generated certificates will now be created in /etc/dovecot
     (Closes: #608719)
   * [8e40ea5] Patch to build with PIE and bindnow
     by intrigeri@debian.org (Closes: #679017)
   * [87d982b] Use libwrap (Closes: #685850)
   * [ebb5421] Start after nslcd (Closes: #692632)
   * [2db5c1a] Add support for dpkg triggers.  This means dovecot will not be
     repeatedly restarted when installing or removing lots of plugins
     (Closes: #601744)
   * [bc66629] Patch to document -k in dsync.1
     by Luca Capello <luca@pca.it> (Closes: #680992)
   * [ba67766] Add lintian overrides.
 .
   [ Marco Nenciarini ]
   * [ffba408] Updated watch file
   * [9777434] Install missing default configuration files from upstream
   * [9496828] Backport fix for segfault in managesieve triggered by
     CHECKSCRIPT command. (Closes: #688197)
Checksums-Sha1: 
 fc214389781ea1baa5d6c952a92150b91e062f41 2302 dovecot_2.1.7-3.dsc
 68fc6c80b71946d88f492b3182cb73b43b921bbe 3778791 dovecot_2.1.7.orig.tar.gz
 e76fe2be1ed86cc0d902075c0a9b809e0c33123b 1122202 dovecot_2.1.7-3.debian.tar.gz
 be524789212c2d93468c6534727a9eeb26f41ca5 24334 dovecot-common_2.1.7-3_all.deb
 bf66eebcb3be8fd00ced5386ae21422e66bc602b 2904766 dovecot-core_2.1.7-3_i386.deb
 3dde1cedbd32d9d3cadb92bad91e8f69e0ab2551 575134 dovecot-dev_2.1.7-3_i386.deb
 e0d6ff48376c3d8e4e294ece3c7428f28f2d58b0 425784 dovecot-imapd_2.1.7-3_i386.deb
 28365bf859187cef0035054f20b9a8df00f80277 362254 dovecot-pop3d_2.1.7-3_i386.deb
 77db62ff3a14ed98669f91f67d0a915abcd7e7ca 352092 dovecot-lmtpd_2.1.7-3_i386.deb
 a8519658c4682b7d864fd3a324429ecc21123ddf 391868 dovecot-managesieved_2.1.7-3_i386.deb
 78f254335bcb4a249638fae46923dc65435e2025 344526 dovecot-pgsql_2.1.7-3_i386.deb
 20e2a52347f6b8952f1f8d627aeabd6ad7cba6c5 341474 dovecot-mysql_2.1.7-3_i386.deb
 cdec2f0afd8444c62ca0e20d8ce3aec6564b72d4 339372 dovecot-sqlite_2.1.7-3_i386.deb
 f8a025212d3acb439d75fc16c8c2f455d9fc5362 354766 dovecot-ldap_2.1.7-3_i386.deb
 5a489e67985a2d54798a0071b4e6eea5ca049691 339910 dovecot-gssapi_2.1.7-3_i386.deb
 f00799e18956a8bdfdebc517d120fd4cbeb63fd1 593878 dovecot-sieve_2.1.7-3_i386.deb
 7d4c34c566cba44d87134024cf8bdb6ba7e31b63 352894 dovecot-solr_2.1.7-3_i386.deb
 ce4314741b29217b06c96017d4bd24f560977a92 5162908 dovecot-dbg_2.1.7-3_i386.deb
Checksums-Sha256: 
 6edb0b85f8ab53725a56bbdddc70c7a84629a60ebdf7e7c04039d4fd33bd1640 2302 dovecot_2.1.7-3.dsc
 d5b7bc61fff947722aebe12ebb25e92c38ce3e27e14ebc54cfc66f0b346cf452 3778791 dovecot_2.1.7.orig.tar.gz
 3b42fcac3da3363adfd73d44028934e459e5dc4978a2e46c199c8d683552945a 1122202 dovecot_2.1.7-3.debian.tar.gz
 bdcab7c81890fd1c1dd1dda7e7448ebf8c66d3d440dcc43637c55e322ee5d269 24334 dovecot-common_2.1.7-3_all.deb
 29049980e636782d223feebc77a9eec6f259ab0d6eb1c45bf1d933150413e4a6 2904766 dovecot-core_2.1.7-3_i386.deb
 bd8ec5ad11b543e995eddfc79b68535fe0c380b474fbb99b355e0de35928c734 575134 dovecot-dev_2.1.7-3_i386.deb
 ed6f975bb23f4f184bab515edb53a15811aace0338bfdb65d639aa807df49b4f 425784 dovecot-imapd_2.1.7-3_i386.deb
 ca9f30122c2e7c306127d75559b76f95e760e6b5c6ae198563ace41c1cf79ca0 362254 dovecot-pop3d_2.1.7-3_i386.deb
 c6e9c6c675c00dfbaf7912a51e196a2b1fbe8e333637d10978595680af55bf76 352092 dovecot-lmtpd_2.1.7-3_i386.deb
 f2bb74cdcc436e09cac2bb8cf6852e32cbb03505a06b04ef708365ceaf079c03 391868 dovecot-managesieved_2.1.7-3_i386.deb
 0c15f02e8f1bf95d7331b575bfd4c1d92b4bfc2fe1d2ed379836b62b6fabafe1 344526 dovecot-pgsql_2.1.7-3_i386.deb
 9f78494eed34320339db71869bc6fefa5ae500e8fa6ed0e4c454aee21b855f84 341474 dovecot-mysql_2.1.7-3_i386.deb
 cfcf5001cff31cf140902b5500e1458612deac0a3320d3b203c21a6edcbaf47f 339372 dovecot-sqlite_2.1.7-3_i386.deb
 c3da8c0570784efc54e56281a3e44fbde5159e00a3cf43d4c419e63b881f6a64 354766 dovecot-ldap_2.1.7-3_i386.deb
 e342c8ea392177600a8f924a1397f24b685bcbaa408731f252abec46f5c502fa 339910 dovecot-gssapi_2.1.7-3_i386.deb
 ebd6d5f7d953f8429a2b9a9096d29e90ecbb886c90351268cd148346c8e9caa2 593878 dovecot-sieve_2.1.7-3_i386.deb
 cedc7aae9e80f8a236f91d7f64ac7b916091435098c22d74df5eb0eaeac8a9e5 352894 dovecot-solr_2.1.7-3_i386.deb
 c2c6343c719eb56a606a69ad8146f94dde9faa5b23008caaf4d97919e2f255ba 5162908 dovecot-dbg_2.1.7-3_i386.deb
Files: 
 dd75e78bafaa120e51d53e6721872183 2302 mail optional dovecot_2.1.7-3.dsc
 b52d0faf1b9ec21bc5552691fe0ff1d1 3778791 mail optional dovecot_2.1.7.orig.tar.gz
 cd5b424acc33ec3b2869c653ada4a81f 1122202 mail optional dovecot_2.1.7-3.debian.tar.gz
 6fecccf2ed6e7059976d207112e55f95 24334 oldlibs extra dovecot-common_2.1.7-3_all.deb
 e2d05e9aaaea58dca7ed18a59dff3f47 2904766 mail optional dovecot-core_2.1.7-3_i386.deb
 24835517f773ac84656ff565ccc9b582 575134 mail optional dovecot-dev_2.1.7-3_i386.deb
 345ddd1e6951ecf19062b76a252a6dc5 425784 mail optional dovecot-imapd_2.1.7-3_i386.deb
 15ea869e54f97f5662dc6da3b748890d 362254 mail optional dovecot-pop3d_2.1.7-3_i386.deb
 a5d5f737cf478b152ad0972f407da362 352092 mail optional dovecot-lmtpd_2.1.7-3_i386.deb
 743e5c70391e0891330223aebc211930 391868 mail optional dovecot-managesieved_2.1.7-3_i386.deb
 ee4affa6f6cefc7dfab303e0a77bacb4 344526 mail optional dovecot-pgsql_2.1.7-3_i386.deb
 05f16f90cbbafe88ffa94a26a84b5c1a 341474 mail optional dovecot-mysql_2.1.7-3_i386.deb
 d5fdf9c3d6a4be3ffa8db682ce8bbd7f 339372 mail optional dovecot-sqlite_2.1.7-3_i386.deb
 a52d998a9c883918135f22e73184f939 354766 mail optional dovecot-ldap_2.1.7-3_i386.deb
 a830e705db928a42b168f38da6a07129 339910 mail optional dovecot-gssapi_2.1.7-3_i386.deb
 a181ac405f72b51dfa120567d82cf079 593878 mail optional dovecot-sieve_2.1.7-3_i386.deb
 58ec02816e35e9809abcdfb5709487c9 352894 mail optional dovecot-solr_2.1.7-3_i386.deb
 b59cead5a4591ac736c80f18dbb6b96b 5162908 debug extra dovecot-dbg_2.1.7-3_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAlCdoeQACgkQ2kYOR+5txmryYACfcU/4H34xaovRKIVfNXoWxAws
Pm4An1QP9vpv7a6NSvGIzVX3zXtM/4UZ
=iaiO
-----END PGP SIGNATURE-----

Reply sent to jaldhar@debian.org (Jaldhar H. Vyas):
You have taken responsibility. (Sat, 10 Nov 2012 09:51:12 GMT) (full text, mbox, link).

Notification sent to Steve Kowalik <stevenk@debian.org>:
Bug acknowledged by developer. (Sat, 10 Nov 2012 09:51:12 GMT) (full text, mbox, link).

Message #64 received at 685896-close@bugs.debian.org (full text, mbox, reply):

Source: dovecot
Source-Version: 1:2.1.7-3

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 685896@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jaldhar H. Vyas <jaldhar@debian.org> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 10 Nov 2012 03:50:30 -0500
Source: dovecot
Binary: dovecot-common dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-dbg
Architecture: source all i386
Version: 1:2.1.7-3
Distribution: unstable
Urgency: high
Maintainer: Dovecot Maintainers <jaldhar-dovecot@debian.org>
Changed-By: Jaldhar H. Vyas <jaldhar@debian.org>
Description: 
 dovecot-common - Transitional package for dovecot
 dovecot-core - secure mail server that supports mbox, maildir, dbox and mdbox ma
 dovecot-dbg - debug symbols for Dovecot
 dovecot-dev - header files for the dovecot mail server
 dovecot-gssapi - GSSAPI authentication support for Dovecot
 dovecot-imapd - secure IMAP server that supports mbox, maildir, dbox and mdbox ma
 dovecot-ldap - LDAP support for Dovecot
 dovecot-lmtpd - secure LMTP server for Dovecot
 dovecot-managesieved - secure ManageSieve server for Dovecot
 dovecot-mysql - MySQL support for Dovecot
 dovecot-pgsql - PostgreSQL support for Dovecot
 dovecot-pop3d - secure POP3 server that supports mbox, maildir, dbox and mdbox ma
 dovecot-sieve - sieve filters support for Dovecot
 dovecot-solr - Solr full text search support for Dovecot
 dovecot-sqlite - SQLite support for Dovecot
Closes: 601744 608719 623440 631257 665487 679017 680035 680992 685850 685896 686931 688197 688407 692632
Changes: 
 dovecot (1:2.1.7-3) unstable; urgency=high
 .
   [ Jaldhar H. Vyas ]
   * [03d5499] Do not generate new dovecot cert if key or cert is already
     present (Closes: #685896,#631257) Thanks to Alexander Ufimtsev
     <alexu@ucd.ie> and Jörg-Volker Peetz <jvpeetz@web.de> for patches.
   * [5be6c2a] You should be able to upgrade and remove dovecot-managesieved
     without errors (Closes: #665487)
   * [1a9ad5c] Fixes instances where UTF-8 was misused instead of mUTF-7
     (Closes: #680035)
   * [c0ac3ba] Backport of fix for failure to autocreate mailboxes
     (Closes: #623440) This also requires setting the default mail_location.
   * [ba1d3f5] Fix FTBS on Hurd (Closes: #686931) via upstream patch backported
     from mercurial.
   * [cfa92b5] Upgrade pigeonhole page to 0.3.1 (Closes: #688407)
   * [58f01c2] Generated certificates will now be created in /etc/dovecot
     (Closes: #608719)
   * [8e40ea5] Patch to build with PIE and bindnow
     by intrigeri@debian.org (Closes: #679017)
   * [87d982b] Use libwrap (Closes: #685850)
   * [ebb5421] Start after nslcd (Closes: #692632)
   * [2db5c1a] Add support for dpkg triggers.  This means dovecot will not be
     repeatedly restarted when installing or removing lots of plugins
     (Closes: #601744)
   * [bc66629] Patch to document -k in dsync.1
     by Luca Capello <luca@pca.it> (Closes: #680992)
   * [ba67766] Add lintian overrides.
 .
   [ Marco Nenciarini ]
   * [ffba408] Updated watch file
   * [9777434] Install missing default configuration files from upstream
   * [9496828] Backport fix for segfault in managesieve triggered by
     CHECKSCRIPT command. (Closes: #688197)
Checksums-Sha1: 
 fc214389781ea1baa5d6c952a92150b91e062f41 2302 dovecot_2.1.7-3.dsc
 68fc6c80b71946d88f492b3182cb73b43b921bbe 3778791 dovecot_2.1.7.orig.tar.gz
 e76fe2be1ed86cc0d902075c0a9b809e0c33123b 1122202 dovecot_2.1.7-3.debian.tar.gz
 be524789212c2d93468c6534727a9eeb26f41ca5 24334 dovecot-common_2.1.7-3_all.deb
 bf66eebcb3be8fd00ced5386ae21422e66bc602b 2904766 dovecot-core_2.1.7-3_i386.deb
 3dde1cedbd32d9d3cadb92bad91e8f69e0ab2551 575134 dovecot-dev_2.1.7-3_i386.deb
 e0d6ff48376c3d8e4e294ece3c7428f28f2d58b0 425784 dovecot-imapd_2.1.7-3_i386.deb
 28365bf859187cef0035054f20b9a8df00f80277 362254 dovecot-pop3d_2.1.7-3_i386.deb
 77db62ff3a14ed98669f91f67d0a915abcd7e7ca 352092 dovecot-lmtpd_2.1.7-3_i386.deb
 a8519658c4682b7d864fd3a324429ecc21123ddf 391868 dovecot-managesieved_2.1.7-3_i386.deb
 78f254335bcb4a249638fae46923dc65435e2025 344526 dovecot-pgsql_2.1.7-3_i386.deb
 20e2a52347f6b8952f1f8d627aeabd6ad7cba6c5 341474 dovecot-mysql_2.1.7-3_i386.deb
 cdec2f0afd8444c62ca0e20d8ce3aec6564b72d4 339372 dovecot-sqlite_2.1.7-3_i386.deb
 f8a025212d3acb439d75fc16c8c2f455d9fc5362 354766 dovecot-ldap_2.1.7-3_i386.deb
 5a489e67985a2d54798a0071b4e6eea5ca049691 339910 dovecot-gssapi_2.1.7-3_i386.deb
 f00799e18956a8bdfdebc517d120fd4cbeb63fd1 593878 dovecot-sieve_2.1.7-3_i386.deb
 7d4c34c566cba44d87134024cf8bdb6ba7e31b63 352894 dovecot-solr_2.1.7-3_i386.deb
 ce4314741b29217b06c96017d4bd24f560977a92 5162908 dovecot-dbg_2.1.7-3_i386.deb
Checksums-Sha256: 
 6edb0b85f8ab53725a56bbdddc70c7a84629a60ebdf7e7c04039d4fd33bd1640 2302 dovecot_2.1.7-3.dsc
 d5b7bc61fff947722aebe12ebb25e92c38ce3e27e14ebc54cfc66f0b346cf452 3778791 dovecot_2.1.7.orig.tar.gz
 3b42fcac3da3363adfd73d44028934e459e5dc4978a2e46c199c8d683552945a 1122202 dovecot_2.1.7-3.debian.tar.gz
 bdcab7c81890fd1c1dd1dda7e7448ebf8c66d3d440dcc43637c55e322ee5d269 24334 dovecot-common_2.1.7-3_all.deb
 29049980e636782d223feebc77a9eec6f259ab0d6eb1c45bf1d933150413e4a6 2904766 dovecot-core_2.1.7-3_i386.deb
 bd8ec5ad11b543e995eddfc79b68535fe0c380b474fbb99b355e0de35928c734 575134 dovecot-dev_2.1.7-3_i386.deb
 ed6f975bb23f4f184bab515edb53a15811aace0338bfdb65d639aa807df49b4f 425784 dovecot-imapd_2.1.7-3_i386.deb
 ca9f30122c2e7c306127d75559b76f95e760e6b5c6ae198563ace41c1cf79ca0 362254 dovecot-pop3d_2.1.7-3_i386.deb
 c6e9c6c675c00dfbaf7912a51e196a2b1fbe8e333637d10978595680af55bf76 352092 dovecot-lmtpd_2.1.7-3_i386.deb
 f2bb74cdcc436e09cac2bb8cf6852e32cbb03505a06b04ef708365ceaf079c03 391868 dovecot-managesieved_2.1.7-3_i386.deb
 0c15f02e8f1bf95d7331b575bfd4c1d92b4bfc2fe1d2ed379836b62b6fabafe1 344526 dovecot-pgsql_2.1.7-3_i386.deb
 9f78494eed34320339db71869bc6fefa5ae500e8fa6ed0e4c454aee21b855f84 341474 dovecot-mysql_2.1.7-3_i386.deb
 cfcf5001cff31cf140902b5500e1458612deac0a3320d3b203c21a6edcbaf47f 339372 dovecot-sqlite_2.1.7-3_i386.deb
 c3da8c0570784efc54e56281a3e44fbde5159e00a3cf43d4c419e63b881f6a64 354766 dovecot-ldap_2.1.7-3_i386.deb
 e342c8ea392177600a8f924a1397f24b685bcbaa408731f252abec46f5c502fa 339910 dovecot-gssapi_2.1.7-3_i386.deb
 ebd6d5f7d953f8429a2b9a9096d29e90ecbb886c90351268cd148346c8e9caa2 593878 dovecot-sieve_2.1.7-3_i386.deb
 cedc7aae9e80f8a236f91d7f64ac7b916091435098c22d74df5eb0eaeac8a9e5 352894 dovecot-solr_2.1.7-3_i386.deb
 c2c6343c719eb56a606a69ad8146f94dde9faa5b23008caaf4d97919e2f255ba 5162908 dovecot-dbg_2.1.7-3_i386.deb
Files: 
 dd75e78bafaa120e51d53e6721872183 2302 mail optional dovecot_2.1.7-3.dsc
 b52d0faf1b9ec21bc5552691fe0ff1d1 3778791 mail optional dovecot_2.1.7.orig.tar.gz
 cd5b424acc33ec3b2869c653ada4a81f 1122202 mail optional dovecot_2.1.7-3.debian.tar.gz
 6fecccf2ed6e7059976d207112e55f95 24334 oldlibs extra dovecot-common_2.1.7-3_all.deb
 e2d05e9aaaea58dca7ed18a59dff3f47 2904766 mail optional dovecot-core_2.1.7-3_i386.deb
 24835517f773ac84656ff565ccc9b582 575134 mail optional dovecot-dev_2.1.7-3_i386.deb
 345ddd1e6951ecf19062b76a252a6dc5 425784 mail optional dovecot-imapd_2.1.7-3_i386.deb
 15ea869e54f97f5662dc6da3b748890d 362254 mail optional dovecot-pop3d_2.1.7-3_i386.deb
 a5d5f737cf478b152ad0972f407da362 352092 mail optional dovecot-lmtpd_2.1.7-3_i386.deb
 743e5c70391e0891330223aebc211930 391868 mail optional dovecot-managesieved_2.1.7-3_i386.deb
 ee4affa6f6cefc7dfab303e0a77bacb4 344526 mail optional dovecot-pgsql_2.1.7-3_i386.deb
 05f16f90cbbafe88ffa94a26a84b5c1a 341474 mail optional dovecot-mysql_2.1.7-3_i386.deb
 d5fdf9c3d6a4be3ffa8db682ce8bbd7f 339372 mail optional dovecot-sqlite_2.1.7-3_i386.deb
 a52d998a9c883918135f22e73184f939 354766 mail optional dovecot-ldap_2.1.7-3_i386.deb
 a830e705db928a42b168f38da6a07129 339910 mail optional dovecot-gssapi_2.1.7-3_i386.deb
 a181ac405f72b51dfa120567d82cf079 593878 mail optional dovecot-sieve_2.1.7-3_i386.deb
 58ec02816e35e9809abcdfb5709487c9 352894 mail optional dovecot-solr_2.1.7-3_i386.deb
 b59cead5a4591ac736c80f18dbb6b96b 5162908 debug extra dovecot-dbg_2.1.7-3_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAlCdoeQACgkQ2kYOR+5txmryYACfcU/4H34xaovRKIVfNXoWxAws
Pm4An1QP9vpv7a6NSvGIzVX3zXtM/4UZ
=iaiO
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 27 Dec 2012 07:28:30 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Jan 13 02:37:35 2018; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #631257 package rewrites SSL certificates

Debian Bug report logs - #631257
package rewrites SSL certificates