Bug#390415: [Pkg-openssl-devel] Bug#390415: openssl: Cannot Get Private Key from Cert Created

[Kurt Roeckx]

On Sat, Oct 07, 2006 at 09:25:20PM +0800, Mohamed Sulaiman Sultan Suhaibuddeen wrote:
> 
> 
> I had regenerate my cert, but this is shown in my mail.log, is these
> normal? please advice

How do you exactly generate your cert?

Afaik, postfix has 2 lines in it's config file, one for the certificate,
and one for the key.  They can both point to the same file.

You need a file with: "-----BEGIN CERTIFICATE-----" in it, and one with
"-----BEGIN RSA PRIVATE KEY-----" (or DSA).

That mail.log file really don't look normal.

Can you try connecting to it using the openssl s_client?
Something like:
openssl s_client -connect localhost:25 -starttls smtp -crlf



Kurt