Okay! Well I guess I need to read up a little bit more on permissions as I haven't done much server admin in the past. I assume I need to make sure that the unpriveliged user has read access to the certificate? Which user is it that needs this?
Sorry for the late reply. Thanks! On Wed, Feb 19, 2014 at 4:42 PM, Gilles Chehade <[email protected]> wrote: > On Wed, Feb 19, 2014 at 02:00:44PM +0100, Isak Andersson wrote: > > Hey guys! > > > > I guess I said that it works too early. sudo smtpd -n outputs > > "Configuration ok" but when I try to start it, it dies immediately. > First I > > got the error that the ssl tree is out of sync but I am not seeing that > > anymore after a reboot. However running it as root with the option -d > does > > show the error: > > > > ``` > > [root@BrutusBjare isak]# smtpd -n > > configuration OK > > [root@BrutusBjare isak]# smtpd -d > > info: OpenSMTPD 5.4.1p1 starting > > info: startup > > fatal: smtp: ssltree out of sync > > warn: lost child: smtp exited abnormally > > info: scheduler handler exiting > > info: mail filter exiting > > info: mail transfer agent exiting > > info: mail delivery agent exiting > > info: lookup agent exiting > > warn: control -> smtp: pipe closed > > warn: parent terminating > > ``` > > > > Any ideas? > > > > Maybe I wasn't supposed to just copy the certs to the directories, > perhaps > > I also need to run some command to update some kind of cache? > > > > Nope this is very likely a permissions issue still, the -n check ensures > the configuration is valid but it does not detect that the processes are > able or not to open the certificate after they dropped privileges. > > This has been enhanced after 5.4.1 so next release will no longer suffer > from this cryptic error. > > > -- > Gilles Chehade > > https://www.poolp.org @poolpOrg > > -- > You received this mail because you are subscribed to [email protected] > To unsubscribe, send a mail to: [email protected] > >
