我的 Dovecot 服务器停止授权客户端

我的 Dovecot 服务器停止授权客户端

我在网上看到过一些类似问题的答案,但没有一个能帮助我解决这个问题。

我在服务器上直接安装了一个 Thunderbird 实例,它可以从服务器上获取邮件。服务器上的其他客户端可以从服务器上获取邮件,其他 Thunderbird 客户端也可以从其他服务器获取邮件。

多年来,我一直在我的一台 Debian Linux 服务器上运行 Dovecot 作为 IMAP 服务器。大约在 1 月初,它不再允许 Thunderbird 客户端下载电子邮件。我尝试了所有我能想到的方法,查看了所有我知道的方法,但还是找不到问题所在。我想,如果我可以强制 Thunderbird 客户端允许刷新 IMAP 系统的服务器证书,也许会有所帮助,但当我尝试从系统获取证书时,Thunderbird 说无法获取。有人知道我应该怎么做吗?

doveconf-n:

# 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.19 (4eae2f79)
# OS: Linux 6.1.0-10-amd64 x86_64 Debian 12.1 
# Hostname: RAID-Server
debug_log_path = /var/log/dovecot/mail.bug
info_log_path = /var/log/dovecot/mail.inf
log_path = /var/log/dovecot/mail.err
mail_location = mbox:~/mail:INBOX=~/mail/inbox
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox "Sent Messages" {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
}
passdb {
  driver = pam
}
protocols = " imap"
ssl_cert = </etc/dovecot/private/dovecot.pem
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
userdb {
  driver = passwd
}
protocol imap {
  mail_max_userip_connections = 50
}
root@Backup:~# openssl s_client -connect 192.168.1.50:993 -tls1_2
CONNECTED(00000003)
---
Certificate chain
 0 s:CN = RAID-Server.att.net
   i:CN = RAID-Server.att.net
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Oct 30 01:53:54 2019 GMT; NotAfter: Oct 27 01:53:54 2029 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
<removed>
-----END CERTIFICATE-----
subject=CN = RAID-Server.att.net
issuer=CN = RAID-Server.att.net
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1388 bytes and written 281 bytes
Verification error: self-signed certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: AE20DEEF2FD8CC7F3881B59D51CBCB23B436E92DF06F87124F7E8A760010FFAB
    Session-ID-ctx: 
    Master-Key: 2FC5D8CF5E6C8D77A9BA3FB659F026E6E83328A1BF98E9EF12736DC9B3778BD2260DBB1588CE0E731BF21479DC1D81A0
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - af bc 75 17 7e 2e 44 35-67 52 2e b4 72 7c 18 49   ..u.~.D5gR..r|.I
    0010 - 5e 63 02 50 39 b7 47 d6-de 02 2b e9 ff e9 6b fa   ^c.P9.G...+...k.
    0020 - 5f 27 f2 85 a0 a6 63 47-58 65 be f6 54 f7 96 1e   _'....cGXe..T...
    0030 - e2 b5 d4 af c7 be 06 8b-8f 15 5e 65 55 27 46 61   ..........^eU'Fa
    0040 - d7 e4 75 08 27 47 97 67-a6 37 bc 67 49 17 24 ab   ..u.'G.g.7.gI.$.
    0050 - 78 6f c8 ba af 3e e6 b0-b4 f3 96 9f c3 0a e5 bc   xo...>..........
    0060 - 70 30 c6 9e e2 2d 68 37-a1 68 2c dd dc b8 12 87   p0...-h7.h,.....
    0070 - 9a 60 fd 1f be 25 8a 10-19 46 83 47 ea 7d 8c 16   .`...%...F.G.}..
    0080 - d8 b8 18 ea 38 12 95 23-96 ac 13 82 e2 04 16 6c   ....8..#.......l
    0090 - c7 77 bd 80 59 91 2d a2-28 f7 75 f7 ce 5a 7e 1f   .w..Y.-.(.u..Z~.

    Start Time: 1708484596
    Timeout   : 7200 (sec)
    Verify return code: 18 (self-signed certificate)
    Extended master secret: yes
---
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Debian) ready.

尝试在 Thunderbird 中获取证书

Thunderbird 设置

答案1

您是否有这样的用于日志记录的配置文件

https://raw.githubusercontent.com/docker-mailserver/docker-mailserver/master/target/dovecot/10-logging.conf

##
## Log destination.
##

# Log file to use for error messages. "syslog" logs to syslog,
# /dev/stderr logs to stderr.
log_path = syslog

# Log file to use for informational messages. Defaults to log_path.
#info_log_path =
# Log file to use for debug messages. Defaults to info_log_path.
#debug_log_path =

# Syslog facility to use if you're logging to syslog. Usually if you don't
# want to use "mail", you'll use local0..local7. Also other standard
# facilities are supported.
syslog_facility = mail

##
## Logging verbosity and debugging.
##

# Log unsuccessful authentication attempts and the reasons why they failed.
auth_verbose = yes

# In case of password mismatches, log the attempted password. Valid values are
# no, plain and sha1. sha1 can be useful for detecting brute force password
# attempts vs. user simply trying the same password over and over again.
# You can also truncate the value to n chars by appending ":n" (e.g. sha1:6).
auth_verbose_passwords = sha1:6

# Even more verbose logging for debugging purposes. Shows for example SQL
# queries.
#auth_debug = no

# In case of password mismatches, log the passwords and used scheme so the
# problem can be debugged. Enabling this also enables auth_debug.
#auth_debug_passwords = no

# Enable mail process debugging. This can help you figure out why Dovecot
# isn't finding your mails.
#mail_debug = no

# Show protocol level SSL errors.
verbose_ssl = yes

# mail_log plugin provides more event logging for mail processes.
plugin {
  # Events to log. Also available: flag_change append
  #mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename
  # Available fields: uid, box, msgid, from, subject, size, vsize, flags
  # size and vsize are available only for expunge and copy events.
  #mail_log_fields = uid box msgid size
}

##
## Log formatting.
##

# Prefix for each line written to log file. % codes are in strftime(3)
# format.
#log_timestamp = "%b %d %H:%M:%S "

# Space-separated list of elements we want to log. The elements which have
# a non-empty variable value are joined together to form a comma-separated
# string.
#login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c

# Login log format. %s contains login_log_format_elements string, %$ contains
# the data we want to log.
#login_log_format = %$: %s

# Log prefix for mail processes. See doc/wiki/Variables.txt for list of
# possible variables you can use.
#mail_log_prefix = "%s(%u): "

# Format to use for logging mail deliveries. You can use variables:
#  %$ - Delivery status message (e.g. "saved to INBOX")
#  %m - Message-ID
#  %s - Subject
#  %f - From address
#  %p - Physical size
#  %w - Virtual size
#deliver_log_format = msgid=%m: %$

另外你可以试试这个看看会发生什么

sudo apt-get install mailutils
imap4d your_imap_server_address

相关内容