postfix TLS problem - please help!

[ryanhs]

hello I have successfully installed howtoforge ubuntu breezy and everything is working great except smtp tls. here is a copy of the problem from mail.log. I would very much appreciate any information that woudl help me with this issue. I have been trying to figure this out all day.

Mar 6 20:47:22 bbmail3 postfix/smtpd[15657]: warning: cannot get private key from file /etc/postfix/ssl/smtpd.crt
Mar 6 20:47:22 bbmail3 postfix/smtpd[15657]: warning: TLS library problem: 15657:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:642:Expecting: ANY PRIVATE KEY:
Mar 6 20:47:22 bbmail3 postfix/smtpd[15657]: warning: TLS library problem: 15657:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:709:
Mar 6 20:47:22 bbmail3 postfix/smtpd[15657]: cannot load RSA certificate and key data
Mar 6 20:47:27 bbmail3 postfix/smtpd[15657]: connect from unknown[67.50.128.80]
Mar 6 20:47:42 bbmail3 postfix/smtpd[15657]: lost connection after STARTTLS from unknown[67.50.128.80]
Mar 6 20:47:42 bbmail3 postfix/smtpd[15657]: disconnect from unknown[67.50.128.80]



Additional information:
-----------------------------------------------------------------------
ls -l /etc/postfix/ssl
total 20
-rw-r--r-- 1 root root 969 2006-03-06 20:12 cacert.pem
-rw-r--r-- 1 root root 963 2006-03-06 20:12 cakey.pem
-rw-r--r-- 1 root root 741 2006-03-06 20:11 smtpd.crt
-rw-r--r-- 1 root root 631 2006-03-06 20:11 smtpd.csr
-rw-r--r-- 1 root root 887 2006-03-06 20:11 smtpd.key
root@bbmail3:/etc/postfix#

------------------------------------------------------------------------
root@bbmail3:/etc/postfix/ssl# cat smtpd.crt
-----BEGIN CERTIFICATE-----
MIIB9TCCAV4CCQDG3QcPheHAVjANBgkqhkiG9w0BAQQFADA/MQswCQYDVQQGEwJV
UzOpkSo2VCwtCQoa7755gAmldydeOru
vacIU4Heskrv6PVj/0CWLvDhh7gvkydN0XLZMp21j22b2m8fRhuI+X9c/neesEQ0
BxV0F+ixLs+2bIMseMFBrSrCx6AuBITL9Q==
-----END CERTIFICATE-----
root@bbmail3:/etc/postfix/ssl#

NOTE: The middle of the ssl cert was removed for security.

I was not able to find any information online about the problem that I am having.

I have redone the openssl steps from:
http://howtoforge.com/perfect_setup_ubuntu_5.10_p4

[falko]

Hm, maybe you have a corrupt SSL cert (but you have already redone all the steps from the tutorial...).

If you don't need TLS I wouldn't use it.

[ryanhs]

is there some other agent that relays the ssl cert to postfix/smtpd?

[falko]

How do you mean that?

[paolo]

Same problem here...

[falko]

What's the exact problem? What's in your logs?

[paolo]

Aug 10 18:38:24 *** postfix/smtpd[7024]: initializing the server-side TLS engine
Aug 10 18:38:24 *** postfix/smtpd[7024]: warning: cannot get private key from file /etc/postfix/newreq.pem
Aug 10 18:38:24 *** postfix/smtpd[7024]: warning: TLS library problem: 7024:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:642:Expecting: ANY PRIVATE KEY:
Aug 10 18:38:24 *** postfix/smtpd[7024]: warning: TLS library problem: 7024:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:709:
Aug 10 18:38:24 *** postfix/smtpd[7024]: cannot load RSA certificate and key data

[falko]

Are you using TLS to send emails? If so, does it work with "normal" SMTP?

[paolo]

I wanted to use TLS to receive email. Dunno if it use TLS to sending to other SMTP.

[falko]

Originally Posted by paolo

Dunno if it use TLS to sending to other SMTP.

Please check your settings in your email client.

What's in /etc/postfix/master.cf?