2018-04-05 07:17:42 -05:00
<!DOCTYPE html>
< html >
< head >
< meta http-equiv = "Content-Type" content = "text/html; charset=utf-8" / >
< title > Upgrade Dovecot from 2.2.x to 2.3.x< / title >
< link rel = "stylesheet" type = "text/css" href = "./css/markdown.css" / >
< / head >
< body >
< div id = "navigation" >
< a href = "https://www.iredmail.org" target = "_blank" >
< img alt = "iRedMail web site"
src="./images/logo-iredmail.png"
style="vertical-align: middle; height: 30px;"
/>
< span > iRedMail< / span >
< / a >
// < a href = "./index.html" > Document Index< / a > < / div > < h1 id = "upgrade-dovecot-from-22x-to-23x" > Upgrade Dovecot from 2.2.x to 2.3.x< / h1 >
< p > Dovecot 2.3 breaks some backward compatible, and here's a short tutorial to
convert your Dovecot 2.2 config file to fully work with Dovecot 2.3.< / p >
< p > For more details, please read Dovecot wiki page: < a href = "https://wiki2.dovecot.org/Upgrading/2.3" > Upgrading Dovecot v2.2 to v2.3< / a > .< / p >
< div class = "admonition attention" >
< p class = "admonition-title" > Attention< / p >
2018-04-05 07:32:02 -05:00
< ul >
< li > Currently only FreeBSD offers Dovecot 2.3 by the ports tree, other Linux
or OpenBSD distributions still offers Dovecot 2.2, you should stick to
Dovecot 2.2 if your Linux/BSD vendor doesn't offer 2.3 yet.< / li >
< li > Dovecot 2.3 uses TLSv1 as minimal SSL protocol, if you prefer TLSv1.1 or
TLSv1.2, please set the protocol version in parameter < code > ssl_min_protocol< / code >
like below:< / li >
< / ul >
2018-04-05 07:17:42 -05:00
< p > < code > ssl_min_protocol = TLSv1.2< / code > < / p >
< / div >
2018-04-05 07:32:02 -05:00
< h2 id = "upgrade-dovecot-on-linuxfreebsdopenbsd" > Upgrade Dovecot on Linux/FreeBSD/OpenBSD< / h2 >
< p > Open a shell terminal, and switch to Dovecot configuration directory first:< / p >
< ul >
< li > On Linux/OpenBSD:< / li >
< / ul >
< pre > < code > cd /etc/dovecot/
2018-04-05 07:17:42 -05:00
< / code > < / pre >
< ul >
2018-04-06 01:22:30 -05:00
< li > On FreeBSD:< ul >
< li > Please upgrade ports < code > mail/dovecot< / code > and < code > mail/dovecot-pigeonhole< / code > first.
You can use tool like < code > portmaster< / code > or < code > portupgrade< / code > for this purpose.
FYI: < a href = "https://www.freebsd.org/doc/handbook/ports-using.html" > Using the Ports Collection< / a > < / li >
< li > After upgraded both ports, please run:< / li >
< / ul >
< / li >
2018-04-05 07:17:42 -05:00
< / ul >
2018-04-05 07:32:02 -05:00
< pre > < code > cd /usr/local/etc/dovecot/
2018-04-05 07:17:42 -05:00
< / code > < / pre >
2018-04-05 07:32:02 -05:00
< p > Run commands below as root user, these commands will:< / p >
2018-04-05 07:17:42 -05:00
< ul >
2018-04-05 07:32:02 -05:00
< li > Comment out parameter < code > ssl_protocols< / code > < / li >
< li > Remove parameter < code > postmaster_address< / code > < / li >
< li > Rename plugin names and parameters:< ul >
< li > < code > stats< / code > -> < code > old_stats< / code > < / li >
< li > < code > imap_status< / code > -> < code > imap_old_stats< / code > < / li >
< li > < code > stats_refresh< / code > -> < code > old_stats_refresh< / code > < / li >
< li > < code > service stats {}< / code > -> < code > service old-stats {}< / code > < / li >
< li > < code > fifo_listener stats-mail {}< / code > -> < code > fifo_listener old-stats-mail {}< / code > < / li >
< li > < code > stats_track_cmds< / code > -> < code > old_stats_track_cmds< / code > < / li >
2018-04-05 07:17:42 -05:00
< / ul >
2018-04-05 07:32:02 -05:00
< / li >
< / ul >
< pre > < code > perl -pi -e 's/^ssl_protocols/#${1}/g' dovecot.conf
perl -pi -e 's#(postmaster_address.*)##g' dovecot.conf
perl -pi -e 's#^(mail_plugins.*) stats(.*)#${1} old_stats${2}#g' dovecot.conf
perl -pi -e 's#imap_stats#imap_old_stats#g' dovecot.conf
perl -pi -e 's#service stats#service old-stats#g' dovecot.conf
perl -pi -e 's#fifo_listener stats-mail#fifo_listener old-stats-mail#g' dovecot.conf
perl -pi -e 's#stats_refresh#old_stats_refresh#g' dovecot.conf
perl -pi -e 's#stats_track_cmds#old_stats_track_cmds#g' dovecot.conf
2018-04-05 07:17:42 -05:00
< / code > < / pre >
2018-04-05 07:32:02 -05:00
< ul >
< li > On RHEL/CentOS, please add new setting in < code > dovecot.conf< / code > :< / li >
< / ul >
< pre > < code > ssl_dh = < /etc/pki/tls/dh2048_param.pem
2018-04-05 07:17:42 -05:00
< / code > < / pre >
2018-04-05 07:32:02 -05:00
< ul >
< li > On Debian/Ubuntu/OpenBSD/FreeBSD, please add new setting in < code > dovecot.conf< / code > :< / li >
< / ul >
2018-04-05 07:17:42 -05:00
< pre > < code > ssl_dh = < /etc/ssl/dh2048_param.pem
2018-04-08 00:48:18 -05:00
< / code > < / pre >
< h3 id = "sql-structure-changes-for-mysqlmariadbpostgresql-backends" > SQL structure changes for MySQL/MariaDB/PostgreSQL backends< / h3 >
< p > Dovecot-2.3 changes the flag for TLS secure connections internally, it's used
by iRedMail to detect the connection type. We need to create a new SQL column
for this change.< / p >
< ul >
< li > For MySQL/MariaDB, please login to SQL server as root user, then run SQL
commands below:< / li >
< / ul >
< pre > < code > USE vmail;
ALTER TABLE mailbox ADD COLUMN enableimaptls TINYINT(1) NOT NULL DEFAULT 1;
ALTER TABLE mailbox ADD INDEX (enableimaptls);
2018-04-08 14:28:27 -05:00
ALTER TABLE mailbox ADD COLUMN enablepop3tls TINYINT(1) NOT NULL DEFAULT 1;
ALTER TABLE mailbox ADD INDEX (enablepop3tls);
2018-04-08 00:48:18 -05:00
< / code > < / pre >
< ul >
< li > For PostgreSQL backend, please switch to PostgreSQL daemon user with < code > su< / code >
command first, then run SQL commands below:< / li >
< / ul >
< pre > < code > \c vmail;
ALTER TABLE mailbox ADD COLUMN enableimaptls INT2 NOT NULL DEFAULT 1;
CREATE INDEX idx_mailbox_enableimaptls ON mailbox (enableimaptls);
2018-04-08 14:28:27 -05:00
ALTER TABLE mailbox ADD COLUMN enablepop3tls INT2 NOT NULL DEFAULT 1;
CREATE INDEX idx_mailbox_enablepop3tls ON mailbox (enablepop3tls);
2018-04-05 07:17:42 -05:00
< / code > < / pre > < div class = "footer" >
< p style = "text-align: center; color: grey;" > All documents are available in < a href = "https://bitbucket.org/zhb/iredmail-docs/src" > BitBucket repository< / a > , and published under < a href = "http://creativecommons.org/licenses/by-nd/3.0/us/" target = "_blank" > Creative Commons< / a > license. You can < a href = "https://bitbucket.org/zhb/iredmail-docs/get/tip.tar.bz2" > download the latest version< / a > for offline reading. If you found something wrong, please do < a href = "https://www.iredmail.org/contact.html" > contact us< / a > to fix it.< / p >
< / div >
<!-- Global site tag (gtag.js) - Google Analytics -->
< script async src = "https://www.googletagmanager.com/gtag/js?id=UA-3293801-21" > < / script >
< script >
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'UA-3293801-21');
< / script >
< / body > < / html >
