- Previous message: Sandy Drobic: "Re: relay_recipients_maps / generic clash"
- Maybe in reply to: mynullvoid: "Postfix Cert Problem"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
|
|
|
From: Rainer Frey (no email)
Date: Mon Oct 02 2006 - 08:16:46 EDT
On Monday 02 October 2006 05:31, mynullvoid wrote:
> > > I had just recreate my certificates for my postfix, but I am getting
> > > error in my mail.log
> > >
> > > Oct 1 13:53:32 mail postfix/smtpd[11449]: initializing the server-side
> > > TLS engine Oct 1 13:53:32 mail postfix/smtpd[11449]: warning: cannot
> > > get private key from file /etc/postfix/ssl/newreq.pem Oct 1 13:53:33
> > > mail postfix/smtpd[11449]: warning: TLS library problem:
> > > 11449:error:0906D06C:PEM routines:PEM_read_bio:no start
> > > line:pem_lib.c:644:Expecting: ANY PRIVATE KEY: Oct 1 13:53:33 mail
> > > postfix/smtpd[11449]: warning: TLS library problem:
> > > 11449:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM
> > > lib:ssl_rsa.c:669: Oct 1 13:53:33 mail postfix/smtpd[11449]: cannot
> > > load RSA certificate and key data Oct 1 13:53:33 mail
> > > postfix/smtpd[11449]: connect from localhost.localdomain[127.0.0.1]
> > >
> > > I can view the /etc/postfix/ssl/newreq.pem but still can't figure what
> > > went wrong, please help me.
> >
> > Are you certain that newreq.pem is the private key that has been signed
> > by the Certificate Authority? Is the public key file there too?
>
> Hi,
>
> Previously I was following guide from:
> http://www.fatofthelan.com/articles/articles.php?pid=22
The current Ubuntu version of CA.pl saves the private key to newkey.pem
instead of inside newreq.pem (although the manual page says differently).
Check whether there is a newkey.pem in /usr/lib/ssl/misc (or wherever you
called CA.pl), and use this as smtpd_tls_key_file.
>
> I had created all the cert and was working fine, and now the problem
> starts. I also don't know what is 250-ENHANCEDSTATUSCODES.
This means your postfix supports enhanced status codes ESMTP extension. This
is a new feature of Postfix 2.3 and has nothing to do with authentication or
TLS.
Rainer
P.S: Please don't top post.
-- Software Development ------------------------------------------------------ Inxmail GmbH Kaiser-Joseph-Str. 274, 79098 Freiburg, Germany Tel +49 (0)761 / 296 979-0 Fax +49 (0)761 / 296 979-9 Web http://www.inxmail.de ------------------------------------------------------- Besuchen Sie uns auf der Systems 2006 23.- 27.10.2006, Messe München Halle 1, Stand 312. Dort zeigen wir Ihnen die neue Version 3.5 der E-Mail-Marketing Lösung Inxmail Professional. http://www.inxmail.de/news/messen_termine_1735.htm
|
|
|