[GH-ISSUE #12] openssl 3 too new #6

Open
opened 2026-02-26 01:32:45 +03:00 by kerem · 0 comments
Owner

Originally created by @felix-engelmann on GitHub (Nov 12, 2022).
Original GitHub issue: https://github.com/jberrenberg/docker-davmail/issues/12

When preparing the p12 file with openssl 3 with openssl pkcs12 -export -in cert.pem -inkey key.pem -certfile cert.pem -out davmail.p12, it can no longer be read by davmail, probably because of a too old JDK version.
It produces this error

davmail_1 | 2022-11-12 12:21:32,360 ERROR [main] davmail - Unable to bind server socket for SMTP on port 1025: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for POP on port 1110: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for IMAP on port 1143: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for CALDAV on port 1080: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for LDAP on port 1389: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)

The solution is to use the -legacy argument:
openssl pkcs12 -legacy -export -in cert.pem -inkey key.encrypted -certfile cert.pem -out davmail.p12

Would it make sense to switch to a newer JDK?
I specifically filed this bug here, because I think it is a packaging issue.

Originally created by @felix-engelmann on GitHub (Nov 12, 2022). Original GitHub issue: https://github.com/jberrenberg/docker-davmail/issues/12 When preparing the p12 file with openssl 3 with `openssl pkcs12 -export -in cert.pem -inkey key.pem -certfile cert.pem -out davmail.p12`, it can no longer be read by davmail, probably because of a too old JDK version. It produces this error `davmail_1 | 2022-11-12 12:21:32,360 ERROR [main] davmail - Unable to bind server socket for SMTP on port 1025: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for POP on port 1110: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for IMAP on port 1143: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for CALDAV on port 1080: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)Unable to bind server socket for LDAP on port 1389: Exception creating secured server socket : parseAlgParameters failed: ObjectIdentifier() -- data isn't an object ID (tag = 48)` The solution is to use the `-legacy` argument: `openssl pkcs12 -legacy -export -in cert.pem -inkey key.encrypted -certfile cert.pem -out davmail.p12` Would it make sense to switch to a newer JDK? I specifically filed this bug here, because I think it is a packaging issue.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-davmail-jberrenberg#6
No description provided.