PDA

View Full Version : no entropy for TLS key generation


matehortua
8th October 2005, 02:28
HI everyone hope i get some help

when any user conects i get these logs

Oct 7 18:02:02 acuario postfix/smtpd[3320]: warning: connect to private/tlsmgr: No such file or directory
Oct 7 18:02:02 acuario postfix/smtpd[3320]: warning: problem talking to server private/tlsmgr: No such file or directory
Oct 7 18:02:02 acuario postfix/smtpd[3320]: warning: no entropy for TLS key generation: disabling TLS support

and i did these steps from the perfect setup suse 9.3 howto
mkdir /etc/postfix/ssl
cd /etc/postfix/ssl/
openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
chmod 600 smtpd.key
openssl req -new -key smtpd.key -out smtpd.csr
openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt
openssl rsa -in smtpd.key -out smtpd.key.unencrypted
mv -f smtpd.key.unencrypted smtpd.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650

sooo i don know whats the error
any idea ..... :)

ManuelW
29th October 2005, 12:41
you have to uncomment

tlsmgr unix - - n 1000? 1 tlsmgr

in /etc/postfix/master.cf

sylwesterr
20th January 2006, 16:40
Thanks ManuelW, I had the same problem and that's what was wrong, now it works prefectly :D

Greetings.

nezorf
19th May 2007, 20:16
you have to uncomment

tlsmgr unix - - n 1000? 1 tlsmgr

in /etc/postfix/master.cf



That is exactly what I needed thanks!