Hi BIll,
just copied the newreq.pem and all files to /etc and /var/spool/postfix/etc -
so that there is no more message: file bla differs with file from blah ...
So far so good - removed the chauthd statement in master.cf - however I still
have a error message:
Sep 5 11:23:44 sun postfix/smtpd[29222]: starting TLS engine
Sep 5 11:23:44 sun postfix/smtpd[29222]: unable to get private key from
'/etc/newreq.pem'
Sep 5 11:23:44 sun postfix/smtpd[29222]: 29222:error:0906406D:PEM
routines:DEF_CALLBACK:problems getting password:pem_lib.c:105:
Sep 5 11:23:44 sun postfix/smtpd[29222]: 29222:error:0906A068:PEM
routines:PEM_do_header:bad password read:pem_lib.c:399:
Sep 5 11:23:44 sun postfix/smtpd[29222]: 29222:error:140B0009:SSL
routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:
Sep 5 11:23:44 sun postfix/smtpd[29222]: TLS engine: cannot load RSA cert/key
data
Sep 5 11:23:44 sun postfix/smtpd[29222]: connect from
pandora.solsys.org[10.0.2.47]
Here the files:
[EMAIL PROTECTED] postfix]# ls -l /etc/*.pem /var/spool/postfix/etc/*.pem
-rw-r--r-- 1 root root 1379 Sep 5 11:16 /etc/cacert.pem
-rw-r--r-- 1 root root 3795 Sep 5 11:16 /etc/newcert.pem
-rw-r--r-- 1 root root 1700 Sep 5 11:16 /etc/newreq.pem
-rw-r--r-- 1 root root 1379 Sep 5 11:16
/var/spool/postfix/etc/cacert.pem
-rw-r--r-- 1 root root 3795 Sep 5 11:16
/var/spool/postfix/etc/newcert.pem
-rw-r--r-- 1 root root 1700 Sep 5 11:16
/var/spool/postfix/etc/newreq.pem
Any more hints ? Getting out of my Latin here ...
Thx & Cheers
Joerg
On Friday 05 September 2003 03:12, Bill Mullen wrote:
> On Thu, 4 Sep 2003, Joerg Mertin wrote:
> > Hi Martin,
> >
> > thx for the hint. Done it the way you suggested and here is wat came out:
> > Sep 4 15:36:14 sun postfix/postfix-script: starting the Postfix mail
> > system Sep 4 15:36:14 sun postfix: succeeded
> > Sep 4 15:36:14 sun postfix/master[31278]: daemon started -- version
> > 2.0.6 Sep 4 15:36:18 sun postfix/smtpd[31285]: starting TLS engine
> > Sep 4 15:36:18 sun postfix/smtpd[31285]: unable to get certificate from
> > '/etc/postfix/newcert.pem'
> > Sep 4 15:36:18 sun postfix/smtpd[31285]: 31285:error:0906D06C:PEM
> > routines:PEM_read_bio:no start line:pem_lib.c:632:Expecting: CERTIFIC
> > ATE:
> > Sep 4 15:36:18 sun postfix/smtpd[31285]: 31285:error:140DC009:SSL
> > routines:SSL_CTX_use_certificate_chain_file:PEM lib:ssl_rsa.c:765:
> > Sep 4 15:36:18 sun postfix/smtpd[31285]: TLS engine: cannot load RSA
> > cert/key data
> >
> > I did all the same steps - except replaced newreq with newhostreq.
> > No Difference... Failure again.
>
> If your postfix is running smtpd chrooted (it probably is), then those
> files will need to be copied into /var/spool/postfix/etc/, and would then
> be referenced in main.cf as /etc/filename (IIRC). This should allow the
> smtpd process to see - and, therefore, be able to use - them.
>
> HTH!
--
Without fools there would be no wisdom.
------------------------------------------------------------------------
| Joerg Mertin : [EMAIL PROTECTED] (Home)|
| in Neuch�tel/Schweiz : [EMAIL PROTECTED] (Alt1)|
| Stardust's LiNUX System : [EMAIL PROTECTED] (Alt2)|
| Web: http://www.solsys.org: Voice & Fax: +41(0)32 / 725 52 54 |
------------------------------------------------------------------------
PGP Fingerprint: AF0F FB75 997B 025F 4538 5AD6 9888 5D97 170B 8B7A
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com