Bug 1918638

Summary: dovecot with libsodium support
Product: Red Hat Enterprise Linux 8 Reporter: cybernet <cybernet2u>
Component: dovecotAssignee: Michal Hlavinka <mhlavink>
Status: CLOSED NOTABUG QA Contact: CS System Management SST QE <rhel-cs-system-management-subsystem-qe>
Severity: low Docs Contact:
Priority: unspecified    
Version: CentOS StreamCC: bstinson, carl, cybernet2u, jwboyer
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-01-21 09:50:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description cybernet 2021-01-21 09:39:20 UTC
Description of problem:


Do you think that RHEL should have dovecot compiled with libsodium support ?


It can only have benefits with no downside if one doesn't want to use it

It's already implemented in Fedora 29 && 30 for more than 12 months

Comment 1 Michal Hlavinka 2021-01-21 09:50:26 UTC
This is not a bug report, please do not use bugzilla for asking questions.

It is compiled without libsodium as it implements crypto and we try to reduce amount of crypto containing libraries for security and certification reasons.

Comment 2 cybernet 2021-01-22 11:08:18 UTC
That's one way to see it

The way I see it, I'm using argon2 ( a key derivation function that was selected as the winner of the Password Hashing Competition in July 2015 ) on a PHP website to encrypt password for mail accounts and needed this option for dovecot to be able to decrypt it )

I could always compile it from source, but then what does EL stands for ? Enterprise Linux without the best password hashing ?
It's not like you have to write code, you just have to add some argument(s) to the compiler ...

The bug may not be in the software, but for sure it is in your mindset.

Thank you.