From: hdkutz (no email)
Date: Mon Apr 02 2007 - 15:44:07 EDT
On Mon, Apr 02, 2007 at 08:17:54PM +0100, Bernhard D Rohrer wrote:
> Victor Duchovni wrote:
> >
> >An RSA or DSA key pair.
> >
>
> > RSA sanity check:
> > # smtpd_tls_cert_file=$(postconf -h smtpd_tls_cert_file)
> > # eval "smtpd_tls_key_file=$(postconf -h smtpd_tls_key_file)"
> > # mcert=$(openssl x509 -in $smtpd_tls_cert_file -noout -modulus)
> > # mkey=$(openssl rsa -in $smtpd_tls_key_file -noout -modulus)
> > # if [ "$m1" != "$m2" ]; then echo "Key and cert don't match"; fi
> >
> thanks!
>
> for some reason postfix seems to be using a standard config
>
> root at collab:/home/graylion# postconf -h smtpd_tls_cert_file
>
> root at collab:/home/graylion# postconf -h smtpd_tls_key_file
> $smtpd_tls_cert_file
>
> whereas my main.cf states:
>
> smtp_tls_cert_file = /usr/lib/ssl/collab.pem
> smtp_tls_key_file = /usr/lib/ssl/newkey.pem
Typo?
smtp_tls_cert_file != smtpd_tls_cert_file
smtp_tls_key_file != smtpd_tls_key_file
Cheers,
ku
-- Princess Leia: I love you. Han Solo: I know.
|
|
|