NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

dovecot again/still again



I am trying once more to get dovecot working with TLS/SSL enabled,
similarly postscript.

I saw Greg Troxel's post about missing redirect < characters in the
config file, but this doesn't fix my problem.   The maillog file says:

Jun 10 17:41:28 viking dovecot: imap-login: Fatal: Couldn't parse
private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start
line: Expecting: ANY PRIVATE KEY
Jun 10 17:41:28 viking dovecot: master: Error: service(imap-login):
command startup failed, throttling for 60 secs

Postfix says:

Jun 10 17:28:27 viking postfix/smtpd[534]: warning: cannot get RSA
private key from file /etc/ssl/certs/viking.pem: disabling TLS support
Jun 10 17:28:27 viking postfix/smtpd[534]: warning: TLS library
problem: 534:error:0906D06C:PEM routines:PEM_read_bio:no start
line:/usr/src/crypto/external/bsd/openssl/dist/crypto/pem/pem_lib.c:703:Expecting: ANY PRIVATE KEY:
Jun 10 17:28:27 viking postfix/smtpd[534]: warning: TLS library
problem: 534:error:140B0009:SSL
routines:SSL_CTX_use_PrivateKey_file:PEM
lib:/usr/src/crypto/external/bsd/openssl/dist/ssl/ssl_rsa.c:669:

I have no real experience of what a parsing of the private key should
show, but when I do:
openssl asn1parse < private.pem
I get:

    0:d=0  hl=4 l= 631 cons: SEQUENCE          
    4:d=1  hl=2 l=   1 prim: INTEGER           :00
    7:d=1  hl=2 l=  13 cons: SEQUENCE          
    9:d=2  hl=2 l=   9 prim: OBJECT            :rsaEncryption
   20:d=2  hl=2 l=   0 prim: NULL              
   22:d=1  hl=4 l= 609 prim: OCTET STRING      [HEX
DUMP]:3082025D02010002818100C4DC77332949C3EB226D9503E8D072091868B6A2A5177F10D871B51864716AD629AA05B.....
(continues for several lines' worth)

I think there actually must be something wrong with the private key,
but I can't work out what or why.

-- 
Steve Blinkhorn <steve%prd.co.uk@localhost>


Home | Main Index | Thread Index | Old Index