Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1918638

Summary:	dovecot with libsodium support
Product:	Red Hat Enterprise Linux 8	Reporter:	cybernet <cybernet2u>
Component:	dovecot	Assignee:	Michal Hlavinka <mhlavink>
Status:	CLOSED NOTABUG	QA Contact:	CS System Management SST QE <rhel-cs-system-management-subsystem-qe>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	CentOS Stream	CC:	bstinson, carl, cybernet2u, jwboyer
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-01-21 09:50:26 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description cybernet 2021-01-21 09:39:20 UTC

Description of problem:


Do you think that RHEL should have dovecot compiled with libsodium support ?


It can only have benefits with no downside if one doesn't want to use it

It's already implemented in Fedora 29 && 30 for more than 12 months

Comment 1 Michal Hlavinka 2021-01-21 09:50:26 UTC

This is not a bug report, please do not use bugzilla for asking questions.

It is compiled without libsodium as it implements crypto and we try to reduce amount of crypto containing libraries for security and certification reasons.

Comment 2 cybernet 2021-01-22 11:08:18 UTC

That's one way to see it

The way I see it, I'm using argon2 ( a key derivation function that was selected as the winner of the Password Hashing Competition in July 2015 ) on a PHP website to encrypt password for mail accounts and needed this option for dovecot to be able to decrypt it )

I could always compile it from source, but then what does EL stands for ? Enterprise Linux without the best password hashing ?
It's not like you have to write code, you just have to add some argument(s) to the compiler ...

The bug may not be in the software, but for sure it is in your mindset.

Thank you.