Bug 2342914

Summary: acme-tiny built-in notify for dovecot fails
Product: [Fedora] Fedora EPEL Reporter: Stuart D Gathman <stuart>
Component: acme-tinyAssignee: Stuart D Gathman <stuart>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: epel8CC: blaise, stuart
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Stuart D Gathman 2025-01-30 01:46:40 UTC
Description of problem:
When renewing cert, dovecot copy of cert is not refreshed (and dovecot restarted)

Version-Release number of selected component (if applicable):
acme-tiny-4.1.0-7.el8.noarch

How reproducible:
always

Steps to Reproduce:
1.renew cert (wait or manually run with larger window)
2.
3.

Actual results:
built-in script to copy cert to /etc/pki/dovecot and restart dovecot is not triggered

Expected results:
dovecot cert refreshed

Additional info:
The built-in script looks for cert filename in 10-ssl.conf.   It has moved to 10-ssl.root for el8.  Workaround: edit /etc/acme-tiny/notify.sh

We want a fix that works on a variety of dovecot versions.