Anyone have any insights as to why SSL is taking a crap on me? It
SEEMS as though it "can't see" /etc/mail/certs/cert.pm except that it
IS there:
# ls -la /etc/mail/certs
total 16
drwxr-xr-x 2 root mail 4096 May 7 16:23 .
drwxr-xr-x 3 root root 4096 May 7 16:05 ..
-rw------- 1 root root 891 May 7 16:10 cert.pem
-rw------- 1 root root 696 May 7 16:10 req.pem
(I had the certs directory set to 0700 as I would expect it to be,
but relaxed the security on it hoping it was a permissions issue)
Debug output below....
May 7 16:27:06.275 2001 [31015] Trace and Debug destination is file
"/var/log/qpopper.debug" [pop_init.c:855]
May 7 16:27:06.275 2001
May 7 16:27:06.276 2001 [31015] tls-support=0 (-l) [pop_init.c:781]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] Processing config file
'/etc/mail/qpopper.config'; CallTime=1 [pop_config.c:12
75]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] ...read line 1 (22): set tls-support
= stls [pop_config.c:1311]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] Set tls-support to STLS (2)
[pop_config.c:1191]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] ...read line 2 (51): set
tls-server-cert-file = /etc/mail/certs/cert.pem [pop_
config.c:1311]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] Set tls-server-cert-file to
"/etc/mail/certs/cert.pem" [pop_config.c:1207]
May 7 16:27:06.276 2001
May 7 16:27:06.276 2001 [31015] Finished processing config file
'/etc/mail/qpopper.config'; rslt=1 [pop_config
.c:1459]
May 7 16:27:06.276 2001
May 7 16:27:06.277 2001 [31015] (v4.0.2) Servicing request from
"localhost" at 127.0.0.1 [pop_init.c:1153]
May 7 16:27:06.277 2001
May 7 16:27:06.277 2001 [31015] before TLS; tls_support==2 [popper.c:168]
May 7 16:27:06.277 2001
May 7 16:27:06.277 2001 [31015] ...Initializing OpenSSL library
[pop_tls_openssl.c:220]
May 7 16:27:06.277 2001
May 7 16:27:06.280 2001 [31015] ...have /dev/urandom; skipping PRNG
seeding [pop_tls_openssl.c:278]
May 7 16:27:06.280 2001
May 7 16:27:06.280 2001 [31015] ...setting method to
SSLv23_server_method [pop_tls_openssl.c:302]
May 7 16:27:06.280 2001
May 7 16:27:06.280 2001 [31015] ...allocating OpenSSL context
[pop_tls_openssl.c:332]
May 7 16:27:06.280 2001
May 7 16:27:06.280 2001 [31015] ...setting certificate file
/etc/mail/certs/cert.pem [pop_tls_openssl.c:343]
May 7 16:27:06.280 2001
May 7 16:27:06.281 2001 [31015] Error setting certificate PEM file
/etc/mail/certs/cert.pem [pop_tls_openssl.c
:348]
May 7 16:27:06.281 2001
May 7 16:27:06.281 2001 [31015] ...SSL error: error:0906D06C:PEM
routines:PEM_read_bio:no start line [pop_tls_
openssl.c:348]
May 7 16:27:06.281 2001
May 7 16:27:06.281 2001 [31015] ...SSL error: error:140AD009:SSL
routines:SSL_CTX_use_certificate_file:missing
asn1 eos [pop_tls_openssl.c:348]
May 7 16:27:06.281 2001
May 7 16:27:06.281 2001 [31015] Failed initializing TLS/SSL [popper.c:186]
--
+---------------------+-----------------------------------------+
| [EMAIL PROTECTED] | "Conan! What is best in life?" |
| Derek J. Balling | "To crush your enemies, see them |
| | driven before you, and to hear the |
| | lamentation of their women!" |
+---------------------+-----------------------------------------+
