Sogo emails are unreadable

fearz

I ran a new instance of mailcow on a different server and i ran backup on the old server and restore on the new one, when i login to sogo i see the attached screenshot.

I double-checked the permissions of the emails and its all good, restarted docker and still the same.

appreciating your support.

fearz

Any support please?

DocFraggle

You could try this:

docker compose exec dovecot-mailcow doveadm force-resync -u restoreme@example.net '*'
docker compose exec dovecot-mailcow doveadm quota recalc -u restoreme@example.net

Use your email address

fearz

DocFraggle
\
Still didn’t fix it:

dovecot-mailcow-1 | Sep 24 12:25:23 3af2c7e7db5a dovecot: imap(fearz@fearz.me)<232><BHaBmdwiMNGsFgH4>: Error: Mailbox INBOX: UID=92: read() failed: read(/var/vmail/fearz.me/fearz/Maildir/cur/1726433132.M570622P199.fbf085baadda,S=1775,W=1813:2,S) failed: Decryption error: no private key available (read reason=prefetch)
dovecot-mailcow-1 | Sep 24 12:25:23 3af2c7e7db5a dovecot: imap(fearz@fearz.me)<232><BHaBmdwiMNGsFgH4>: Disconnected: FETCH failed: Mailbox INBOX: UID=92: read() failed: read(/var/vmail/fearz.me/fearz/Maildir/cur/1726433132.M570622P199.fbf085baadda,S=1775,W=1813:2,S) failed: Decryption error: no private key available (read reason=prefetch) in=465 out=67226 deleted=0 expunged=0 trashed=0 hdr_count=86 hdr_bytes=172 body_count=0 body_bytes=0
dovecot-mailcow-1 | Sep 24 12:25:24 3af2c7e7db5a dovecot: imap-login: Login: user=fearz@fearz.me, method=PLAIN, rip=172.22.1.248, lip=172.22.1.250, mpid=234
dovecot-mailcow-1 | Sep 24 12:25:24 3af2c7e7db5a dovecot: imap(fearz@fearz.me)<234><C0GEmdwiPtGsFgH4>: Error: Mailbox INBOX: UID=92: read() failed: read(/var/vmail/fearz.me/fearz/Maildir/cur/1726433132.M570622P199.fbf085baadda,S=1775,W=1813:2,S) failed: Decryption error: no private key available (read reason=prefetch)

I ensured the permissions and owner of the *.pem files are correct as well, I Also copied the *.pem files of the old server (backup) to the new one and still the same errors in dovecot when i click on any email.

DocFraggle

fearz no private key available

Did you really restore everything? It looks like the key is missing to decrypt the mail files

fearz I Also copied the *.pem files

Which ones?

fearz

root@vanilla:/var/lib/docker/volumes/mailcowdockerized_crypt-vol-1/data# ls -la
total 24
drwxr-xr-x 2 root root 4096 Sep 24 06:51 .
drwx—–x 3 root root 4096 Sep 4 08:43 ..
-rw——- 1 401 root 241 Sep 24 06:52 ecprivkey.pem
-rw——- 1 root root 241 Sep 24 06:51 ecprivkey.pembk
-rw-r–r– 1 401 root 178 Sep 24 06:52 ecpubkey.pem
-rw-r–r– 1 root root 178 Sep 24 06:51 ecpubkey.pembk
root@vanilla:/var/lib/docker/volumes/mailcowdockerized_crypt-vol-1/data#

fearz

Any support? @DocFraggle

DocFraggle

So ecprivkey.pem is the one from the old server right? Did you restart the dovecot container after copying?
Did you check the dovecot logs if it complains about anything regarding the key file?

fearz

DocFraggle
Yes & same error in dovecot.

DocFraggle

Which mailcow version was installed on the old server where you took the backup? Was it updated to the latest version?

fearz

DocFraggle

Latest version and i used the update.sh script on both servers so I believe its the latest too.

DocFraggle

Today I finally got to setup a new VM at home and using the cold standby script to mirror my mailcow to the new VM

https://docs.mailcow.email/backup_restore/b_n_r-coldstandby/

This worked like a charm, and after logging in to Sogo on the new VM all mails were readable. So I don’t get what went wrong with your restore… maybe try it again (the decryption key is already included in the vmail backup file) or try the above method

fearz

DocFraggle

The cold-standby finally worked, there must be something wrong with the manual backup/restore.

Thanks!