Bug#390415: [Pkg-openssl-devel] Bug#390415: openssl: Cannot Get Private Key from Cert Created

[Mohamed Sulaiman Sultan Suhaibuddeen]

I generate the key using:

openssl req -new -outform PEM -out
/etc/postfix/smtpd.cert -newkey rsa:2048 \
-nodes -keyout
/etc/postfix/smtpd.key -keyform PEM -days 3650 -x509

I was
following a guide from: http://workaround.org/articles/ispmail-sarge/

I would appreciate if you can assist me in properly creating and
testing the key.

Thank you

Regards

>
On Sat, Oct 07, 2006 at 09:25:20PM +0800, Mohamed Sulaiman Sultan 
> Suhaibuddeen wrote: 
>> 
>> 
>> I
had regenerate my cert, but this is shown in my mail.log, is these 
>> normal? please advice 
> 
> How do you exactly
generate your cert? 
> 
> Afaik, postfix has 2 lines in
it's config file, one for the certificate, 
> and one for the key.
They can both point to the same file. 
> 
> You need a
file with: "-----BEGIN CERTIFICATE-----" in it, and one with 
> "-----BEGIN RSA PRIVATE KEY-----" (or DSA). 
>

> That mail.log file really don't look normal. 
> 
> Can you try connecting to it using the openssl s_client? 
>
Something like: 
> openssl s_client -connect localhost:25
-starttls smtp -crlf 
> 
> 
> 
> Kurt 
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20061008/00bbb736/attachment.html