Backport fix from http://bugs.contribs.org/show_bug.cgi?id=7570

root/var/service/dovecot/control/1

@@ -33,8 +33,8 @@ my $pem = "./ssl/imapd.pem";
 # Now copy system pem file into jail used by ldap
 copy("/home/e-smith/ssl.pem/$s.$d.pem", "$pem.$$")
   or die "failed to copy SSL PEM: $!";
-chmod 0400, "$pem.$$";
-esmith::util::chownFile("root", "root", "$pem.$$");
+chmod 0440, "$pem.$$";
+esmith::util::chownFile("root", "stunnel", "$pem.$$");
 rename("$pem.$$", "$pem")
   or die "failed to rename $pem.$$ to $pem: $!";