OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix Cert Problem

From: mynullvoid (mynullvoidyahoo.com)
Date: Sun Oct 01 2006 - 22:31:21 CDT


Hi,
   
  Previously I was following guide from: http://www.fatofthelan.com/articles/articles.php?pid=22
   
  I had created all the cert and was working fine, and now the problem starts. I also don't know what is 250-ENHANCEDSTATUSCODES.
   
  The cert is a self sign cert as the article guide.
   
  I am using DEBIAN SID
   
  Please HELP
   
  Thank you

Scott Kitterman <postfixkitterman.com> wrote:
  On Sunday 01 October 2006 02:30, mynullvoid wrote:
> when I do an auth trial I got this error:
> c3lzYWRtaW4Ac3lzYWRtaW4icjgwbnRoMzgweA==
> mail:/var/log# telnet localhost 25
> Trying 127.0.0.1...
> Connected to localhost.localdomain.
> Escape character is '^]'.
> 220 localhost.localdomain ESMTP Postfix (AZRB)
> ehlo localhost.localdomain
> 250-localhost.localdomain
> 250-PIPELINING
> 250-SIZE
> 250-ETRN
> 250-STARTTLS
> 250-AUTH LOGIN PLAIN
> 250-AUTH=LOGIN PLAIN
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> AUTH PLAIN c3lzYWRtaW4Ac3lzYWRtaW4icjgwbnRoMzgweA==
> 535 5.7.0 Error: authentication failed: bad protocol / cancel
>
>
> mynullvoid wrote:
> I had just recreate my certificates for my postfix, but I am getting
> error in my mail.log
>
> Oct 1 13:53:32 mail postfix/smtpd[11449]: initializing the server-side
> TLS engine Oct 1 13:53:32 mail postfix/smtpd[11449]: warning: cannot get
> private key from file /etc/postfix/ssl/newreq.pem Oct 1 13:53:33 mail
> postfix/smtpd[11449]: warning: TLS library problem:
> 11449:error:0906D06C:PEM routines:PEM_read_bio:no start
> line:pem_lib.c:644:Expecting: ANY PRIVATE KEY: Oct 1 13:53:33 mail
> postfix/smtpd[11449]: warning: TLS library problem:
> 11449:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM
> lib:ssl_rsa.c:669: Oct 1 13:53:33 mail postfix/smtpd[11449]: cannot load
> RSA certificate and key data Oct 1 13:53:33 mail postfix/smtpd[11449]:
> connect from localhost.localdomain[127.0.0.1]
>
> I can view the /etc/postfix/ssl/newreq.pem but still can't figure what
> went wrong, please help me.
>
Are you certain that newreq.pem is the private key that has been signed by the
Certificate Authority? Is the public key file there too?

Scott K

                 
---------------------------------
Get your email and more, right on the new Yahoo.com