两周前，我使用 Dovecot 和 Postfix 设置了一个邮件服务器。这是一个每天处理大约 5000 封邮件的组织的服务器。一切正常，但今天我启用了它，verbose_ssl几乎/etc/dovecot/conf.d/10-logging.conf每次 IMAP 登录都会收到以下错误消息：
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges
Aug 30 00:13:32 mail dovecot: auth: Debug: auth client connected (pid=20442)
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: unknown state [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [94.220.159.232]
Aug 30 00:13:32 mail dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [94.220.159.232]
我在 stackoverflow 上只找到了一个有类似日志条目的问题，但是回答那里是包括所有中级证书，我已经这样做了。
我的/etc/dovecot/conf.d/10-ssl.conf（评论已删除）：
ssl = required
ssl_cert = </etc/ssl/certs/my-domain.de
ssl_key = </etc/ssl/private/my-domain.de
ssl_dh_parameters_length = 2048
ssl_protocols = !SSLv2 !SSLv3
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
ssl_prefer_server_ciphers = yes
有人知道unknown statemail.log 中的这些条目真正意味着什么吗？
答案1
这些不是错误消息，而是调试消息，并且明确标记为这些。除非您需要 verbose_ssl 来调试问题，否则您应该将其关闭。
更多背景信息：它显示了进行 SSL 握手时经历的每个状态。要显示状态描述，它使用 OpenSSL 中的 SSL_state_string_long 函数。此函数没有每个可能状态的字符串描述，如果没有更具体的描述，则返回“未知状态”。同样，无需担心。