OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: TLS problem

From: hdkutz (hdkutzhdkutz.de)
Date: Mon Apr 02 2007 - 14:44:07 CDT


On Mon, Apr 02, 2007 at 08:17:54PM +0100, Bernhard D Rohrer wrote:
> Victor Duchovni wrote:
> >
> >An RSA or DSA key pair.
> >
>
> > RSA sanity check:
> > # smtpd_tls_cert_file=$(postconf -h smtpd_tls_cert_file)
> > # eval "smtpd_tls_key_file=$(postconf -h smtpd_tls_key_file)"
> > # mcert=$(openssl x509 -in $smtpd_tls_cert_file -noout -modulus)
> > # mkey=$(openssl rsa -in $smtpd_tls_key_file -noout -modulus)
> > # if [ "$m1" != "$m2" ]; then echo "Key and cert don't match"; fi
> >
> thanks!
>
> for some reason postfix seems to be using a standard config
>
> rootcollab:/home/graylion# postconf -h smtpd_tls_cert_file
>
> rootcollab:/home/graylion# postconf -h smtpd_tls_key_file
> $smtpd_tls_cert_file
>
> whereas my main.cf states:
>
> smtp_tls_cert_file = /usr/lib/ssl/collab.pem
> smtp_tls_key_file = /usr/lib/ssl/newkey.pem
Typo?
smtp_tls_cert_file != smtpd_tls_cert_file
smtp_tls_key_file != smtpd_tls_key_file

Cheers,
ku
--
Princess Leia:
        I love you.
Han Solo:
        I know.