Mail cant be read/decrypt after restore

KaiserN

Hi,

i had to full restore my mailcow from backup.
This has worked so far, but I no longer see the old emails. They are visible via IMAP/SOGo, but you can’t read/retrieve them anymore.

IMAP
imap(email@domain.tld)<980230><ubMlLwv1YKUAAAAAAAAAAAAAAAAAAAAB>: Error: Mailbox Trash: UID=146: read() failed: read(/var/vmail/domain.tld/email/Maildir/.Trash/cur/1671620783.M5139P450669.4ef82c376ee7,S=79923,W=80977:2,S) failed: Decryption error: no private key available (read reason=prefetch)

SOGo
[75]: [WARN] <0x55a451284eb0[SOGoMailFolder]:folderINBOX> IMAP connection is broken, trying to reconnect... 19.02.2023, 11:15:50 notice [75]: [ERROR] <0x0x55a45123d790[NGImap4Connection]> Error fetching 100 uids for url: imap://name%40domain.tld@172.22.1.250/INBOX/?tls=NO&tlsVerifyMode=none

identical behavior as here
however, i have not changed the container names

ls -al /var/lib/docker/volumes/mailcowdockerized_crypt-vol-1/_data/ total 16 drwxr-xr-x 2 root root 4096 Feb 19 03:34 . drwx-----x 3 root root 4096 Feb 19 03:34 .. -rw------- 1 401 root 241 Feb 19 03:34 ecprivkey.pem -rw-r--r-- 1 401 root 178 Feb 19 03:34 ecpubkey.pem

old Mail (cant see content)
-rw------- 1 5000 5000 755 Feb 20 10:17 '1676884641.M10962P1562.cfe871345e10,S=708,W=732:2,S'

new Mail
-rw------- 1 5000 5000 1265 Dec 26 2016 '1669637562.M711261P34230.b66cd09be82d,S=1418,W=1450:2,Sa'

Any idea how to fix this

KaiserN

the emails are re-encrypted on import?
the key in the backup is different from the new one which is under crypt-vol

could this be the reason why i can only read new emails?

—

I also noticed that the following files were not backed up/restored

data/conf/nginx/redirect.conf (http->https 301)
data/web/.well-known/mta-sts.txt (mta-sts info)

karlito96

Did you end up finding a solution to your issue?
I have the same problem here: https://community.mailcow.email/d/2266-lost-access-to-a-mailbox-but-still-receiving-mail/4

I also see others have encountered this issue recently:
https://community.mailcow.email/d/2082-certain-emails-no-longer-loading-corrupted/3

semaf

I have the same issue now and some new mails cant be decrypted. I have some backups of my key files, checked them if they are the same and they are.

Checked also file permissions and should be fine:

mailcow:/# ls -al /mnt/source/crypt/
total 16
drwxr-xr-x    2 root     root          4096 Feb  8 10:10 .
drwxr-xr-x    7 root     root          4096 Mar 30 01:52 ..
-rw-------    1 401      root           241 Feb  8 10:10 ecprivkey.pem
-rw-r--r--    1 401      root           178 Feb  8 10:10 ecpubkey.pem

Restored all backups but still cant read them. Is it ok that the files are owned by 401? I chowned the files to root and restarted the docker and it has been chowned by 401 again.

Edit
I checked the dovecot container and run a test with

Some of this informations are available:

Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: Error relocating /usr/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: mail_crypt_box_get_public_key: symbol not found (this is usually intentional, so just ignore this message)
Module loaded: /usr/lib/dovecot/lib05_mail_crypt_acl_plugin.so
Module loaded: /usr/lib/dovecot/lib10_mail_crypt_plugin.so
Module loaded: /usr/lib/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so
Debug: mail_crypt_plugin: mail_crypt_curve setting missing - generating EC keys disabled