routines:SSL_CTX_use_certificate:ee key too small

[Former user]

Hi,

After upgrading my poste.io container, I can no longer login to roundcube mail.log gives me this:

Jan 8 12:01:29 mail dovecot: master: Error: service(imap-login): command startup failed, throttling for 2 secs Jan 8 12:01:29 mail dovecot: imap-login: Fatal: Can't load ssl_cert: error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small

[Tim Chaubet]

I've manually generated new certificate files in the container.

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:4096 -out server.key

openssl req -new -key server.key -out server.csr

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

cp server.* /etc/ssl/

cp /etc/ssl/server.* /data/ssl/

and fixed.

[SH]

Certs are pain in the ass to handle. Nice thing with poste is that you can always delete certs from data directory restart and than enable Let's encrypt...