RTFM :). Seriously, you are being prompted for the cert's passphrase.

You need to remove the encrypted passphrase from the cert, then try
again.

openssl rsa -in encrypted.pem > unencrypted.pem 

My .02...


Michael Dingler wrote:
> 
> It seems that I'm sslithering on the sslimy sslopes
> of SSL a little bit, so any help would be appreciated.
> 
> Currently I get my email delivered via secure IMAP,
> with a Cyrus server at the company I work for and
> a Netscape mail client on the local side. The only
> issue is that I'd like to archive my mail and that
> post-jwz Mozilla-Mail just plain sucks.
> 
> So fetchmail would probably be the best solution as
> this would allow me to function quite normally. I
> only got the certificate for Netscape, so I thought
> that exporting it and converting it to .pem would
> be a good idea. Yet somehow my fetchmail doesn't
> seem to like it (5.5.5 --with-ssl) and just quits
> with a socket error. Not very helpful...
> 
> So I tried setting up a local stunnel from plain
> IMAP to secure IMAP. That's what I got:
> 
> linux:~ # stunnel -c -f -d localhost:143 -r mail.consol.de:993 -p
> consol.pem
> LOG5[2009:1024]: Using 'mail.consol.de.993' as tcpwrapper service name
> LOG4[2009:1024]: Wrong permissions on consol.pem
> Enter PEM pass phrase:
> LOG3[2009:1024]: SSL_CTX_use_RSAPrivateKey_file: error:0B080074:x509
> certificate routines:X509_check_private_key:key values mismatch
> 
> Yuck. What's wrong? Is there some special magic I have to
> perform on the certificate (like putting it in a special
> place or running it through some program)? I converted it
> from the raw .p12 file with "openssl pkcs12 -in xxx.p12
> -out xxx.pem". Not enough?
> 
> Linux 2.2.16, OpenSSL 0.9.6, Stunnel 3.8p4, Fetchmail 5.5.5,
> one unhappy mail user 0.1
> 
> ...Michael...
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

-- 
------------------------------------------------------------------
 Ricardo Stella                                  O.I.T.
 (609)896-5000 x7436           _suAve_           Rider University
                 *** SPAM will not be tolerated  ***
begin:vcard 
adr;dom:;;;Lawrenceville;NJ;08648;
adr:;;2083 Lawreceville Road;Lawrenceville;NJ;08648;
n:Stella;Ricardo
tel;fax:1-609-219-4994
tel;work:1-609-896-5000 x7436
x-mozilla-html:FALSE
url:http://poseidon.rider.edu
org:Rider University;O.I.T.
version:2.1
title:Manager
x-mozilla-cpt:;-9584
fn:Ricardo Stella
end:vcard

Reply via email to