hey friends,

 I am trying to make postfix run with tls in chroot mode, but I am not
able to send the messages with tls on. I am using postfix 2.2.10 on
centos 4.0 and  I had compiled the postfix from sources with tls &
cyrus-sasl support. I copied the certificates from /usr/share/ssl to
/etc/postfix.

Below are the errors I am getting:

May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
5:cyrus-sasl support. I copied the certificates from /usr/share/ssl to
/etc/postfix.

Below are the errors I am getting:

May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
5:
May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:
May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:
May 25 13:27:51 test1 postfix/smtpd[4095]: cannot load RSA certificate and ke
y data
May 25 13:27:51 test1 postfix/smtpd[4095]: connect from
test1.sun.net[192.168.1.125]
May 25 13:27:51 test1 postfix/smtpd[4095]: disconnect from
test1.sun.net[ 192.168.1.125]
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: cannot get private key fr
om file /etc/postfix/newreq.pem
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
5:
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257

I telnet into the port 25 on localhost and tried to start tls but it
says "454 TLS not available due to local problem"

telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 test1.sun.net ESMTP Postfix
EHLO test1.sun.net
250-test1.sun.net
250-PIPELINING
250-SIZE 51200000
250-VRFY
250-ETRN
250-STARTTLS
250 8BITMIME
starttls
454 TLS not available due to local problem
quit

I have also attached the result of postconf command with this mail in
"postfix.txt" file.Both SELinux and firewall are off on this system.

Please let me know if you need any further inputs.

Thanks & Regards

Ankush Grover
May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:
May 25 13:27:51 test1 postfix/smtpd[4095]: warning: TLS library problem: 4095
:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:707:
May 25 13:27:51 test1 postfix/smtpd[4095]: cannot load RSA certificate and ke
y data
May 25 13:27:51 test1 postfix/smtpd[4095]: connect from
test1.sun.net[192.168.1.125]
May 25 13:27:51 test1 postfix/smtpd[4095]: disconnect from
test1.sun.net[192.168.1.125]
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: cannot get private key fr
om file /etc/postfix/newreq.pem
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:10
5:
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257
:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:399:
May 25 13:29:37 test1 postfix/smtpd[4257]: warning: TLS library problem: 4257

I telnet into the port 25 on localhost and tried to start tls but it
says "454 TLS not available due to local problem"

telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
220 test1.sun.net ESMTP Postfix
EHLO test1.sun.net
250-test1.sun.net
250-PIPELINING
250-SIZE 51200000
250-VRFY
250-ETRN
250-STARTTLS
250 8BITMIME
starttls
454 TLS not available due to local problem
quit

I have also attached the result of postconf command with this mail in
"postfix.txt" file.Both SELinux and firewall are off on this system.

Please let me know if you need any further inputs.

Thanks & Regards

Ankush Grover