jberrenberg / docker-davmail

Docker container for DavMail POP/IMAP/SMTP/Caldav/Carddav/LDAP Exchange Gateway
The Unlicense
39 stars 17 forks source link

openssl 3 too new #12

Open felix-engelmann opened 1 year ago

felix-engelmann commented 1 year ago

When preparing the p12 file with openssl 3 with openssl pkcs12 -export -in cert.pem -inkey key.pem -certfile cert.pem -out davmail.p12, it can no longer be read by davmail, probably because of a too old JDK version. It produces this error

davmail_1 | 2022-11-12 12:21:32,360 ERROR [main] davmail - Unable to bind server socket for SMTP on port 1025: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for POP on port 1110: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for IMAP on port 1143: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for CALDAV on port 1080: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for LDAP on port 1389: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)

The solution is to use the -legacy argument: openssl pkcs12 -legacy -export -in cert.pem -inkey key.encrypted -certfile cert.pem -out davmail.p12

Would it make sense to switch to a newer JDK? I specifically filed this bug here, because I think it is a packaging issue.