Redundancy server not connecting

Please help not sure where to start looking, on the backup mailserver I get this error:
ms2 dovecot: doveadm(e-mail-address): Fatal: connect(10.155.253.88:12345) failed: Interrupted system call
and on the main server 10.155.253.88 I get the following:
ms1 dovecot: auth: Error: auth client 0 disconnected with 1 pending requests: Connection reset by peer

 

Seems to me that your system is not able to connect to 10.155.253.88 on port 12345

 

I did find port not open on main server, added it to open ports but still getting same errors.
but I found this error:
Error: doveadm client disconnected before handshake: SSL_accept() failed: error:0A00010B:SSL routines::wrong version number
how do i fix without breaking anything

 

May post your replicator config from both systems here to better help understanding the situation. I assume you tcp:10.155.253.88:12345 instead of tcps:10.155.253.88:12345 which would result in such an error

 

I do tcps!!
Ill, Send configs now

 

Config files

 

You configured your replicator doveadm endpoint to use ssl but try to connect without ssl see:

Code:

service doveadm {
    user = vmail
    inet_listener {
        port = 12345
        ssl = yes
    }

Code:

plugin {
    mail_replica = tcp:ms2.serverflex.co.za
}

This has to be:

Code:

plugin {
    mail_replica = tcps:ms2.serverflex.co.za
}

So either use tcps as explained before or disable ssl.

 

Yes it was tcps I just changed it now to see if I see different errors, but no all the same, ill switch ssl off and see

 

It does the same with ssl swiched off?

 

That error indicates that you are not using TCPS or that your certificates not work.

Try to connect to the endpoint with openssl and see if you get a valid certificate:

Code:

openssl s_client -connect ms2.serverflex.co.za:12345 -crlf 

 

Verification OK

New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 4096 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

And I tested it both ways

 

Well if you changed the config to be set to "tcps" and the check with openssl works everything should be good to go. After restarting the dovecot service, do you see any issues in the logs? What does "doveadm replicator status" return?

 

root@ms1:~# doveadm replicator status
Queued 'sync' requests 0
Queued 'high' requests 0
Queued 'low' requests 0
Queued 'failed' requests 0
Queued 'full resync' requests 0
Waiting 'failed' requests 0
Total number of known users 50

I dont see anymore errors on the mail.log and error.log, I assume all is now fine, and the system is the same as before no changes ??

 

I guess you missed restarting the dovecot services or there was an issue with tcps or something like that then Glad it's working now!

 

Thank you for your time at least I understand dovecot a bit better