hey friends,<br><br> I am trying to make postfix run with tls in chroot mode, but I am not<br>able to send the messages with tls on. I am using postfix 2.2.10 on<br>centos 4.0 and I had compiled the postfix from sources with tls &
<br>cyrus-sasl support. I copied the certificates from /usr/share/ssl to<br>/etc/postfix.<br><br>Below are the errors I am getting:<br><br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095<br>:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
<br>5:cyrus-sasl support. I copied the certificates from /usr/share/ssl to<br>/etc/postfix.<br><br>Below are the errors I am getting:<br><br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095<br>
:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10<br>5:<br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095<br>:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:
<br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095<br>:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:<br>May 25 13:27:51 test1 postfix/smtpd[4095]: cannot load RSA certificate and ke
<br>y data<br>May 25 13:27:51 test1 postfix/smtpd[4095]: connect from<br>test1.sun.net[<a href="http://192.168.1.125">192.168.1.125</a>]<br>May 25 13:27:51 test1 postfix/smtpd[4095]: disconnect from<br>test1.sun.net[<a href="http://192.168.1.125">
192.168.1.125</a>]<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: cannot get private key fr<br>om file /etc/postfix/newreq.pem<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257<br>:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
<br>5:<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257<br>:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
<br><br>I telnet into the port 25 on localhost and tried to start tls but it<br>says "454 TLS not available due to local problem"<br><br>telnet localhost 25<br>Trying 127.0.0.1...<br>Connected to localhost.localdomain
(<a href="http://127.0.0.1">127.0.0.1</a>).<br>Escape character is '^]'.<br>220 <a href="http://test1.sun.net">test1.sun.net</a> ESMTP Postfix<br>EHLO <a href="http://test1.sun.net">test1.sun.net</a><br><a href="http://250-test1.sun.net">
250-test1.sun.net</a><br>250-PIPELINING<br>250-SIZE 51200000<br>250-VRFY<br>250-ETRN<br>250-STARTTLS<br>250 8BITMIME<br>starttls<br>454 TLS not available due to local problem<br>quit<br><br>I have also attached the result of postconf command with this mail in
<br>"postfix.txt" file.Both SELinux and firewall are off on this system.<br><br>Please let me know if you need any further inputs.<br><br>Thanks & Regards<br><br>Ankush Grover<br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
<br>:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:<br>May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095<br>:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:
<br>May 25 13:27:51 test1 postfix/smtpd[4095]: cannot load RSA certificate and ke<br>y data<br>May 25 13:27:51 test1 postfix/smtpd[4095]: connect from<br>test1.sun.net[<a href="http://192.168.1.125">192.168.1.125</a>]<br>
May 25 13:27:51 test1 postfix/smtpd[4095]: disconnect from<br>test1.sun.net[<a href="http://192.168.1.125">192.168.1.125</a>]<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: cannot get private key fr<br>om file /etc/postfix/newreq.pem
<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257<br>:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10<br>5:<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
<br>:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:<br>May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257<br><br>I telnet into the port 25 on localhost and tried to start tls but it
<br>says "454 TLS not available due to local problem"<br><br>telnet localhost 25<br>Trying 127.0.0.1...<br>Connected to localhost.localdomain (<a href="http://127.0.0.1">127.0.0.1</a>).<br>Escape character is '^]'.
<br>220 <a href="http://test1.sun.net">test1.sun.net</a> ESMTP Postfix<br>EHLO <a href="http://test1.sun.net">test1.sun.net</a><br><a href="http://250-test1.sun.net">250-test1.sun.net</a><br>250-PIPELINING<br>250-SIZE 51200000
<br>250-VRFY<br>250-ETRN<br>250-STARTTLS<br>250 8BITMIME<br>starttls<br>454 TLS not available due to local problem<br>quit<br><br>I have also attached the result of postconf command with this mail in<br>"postfix.txt"
file.Both SELinux and firewall are off on this system.<br><br>Please let me know if you need any further inputs.<br><br>Thanks & Regards<br><br>Ankush Grover<br><br>