Moving Cyrus TLS component files (.CA, .crt, .key) between servers ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Colleagues,

I am in the process of moving Cyrus service from a Cyrus 2.2.13 / Solaris9
system to a Cyrus 2.3.15 / Solaris10 system and all is running pretty well

EXCEPT

for authenticated IMAP/POP sessions.

CSRs and key on the first server were generated using OpenSSL 0.9.7e while
there is OpenSSL 0.9.8k on the second one (if that matters).

I copied the three files referenced by
  tls_cert_file:
  tls_key_file:
  tls_ca_file:
in /etc/imapd.conf to the new server but appear to have overlooked something,
because my logfile now shows :

Sep 24 16:42:44 mini pop3smvub[5569]: [ID 897861 local6.error] unable to get
certificate from '/usr/local/ssl/official/popimap-vub.crt'
Sep 24 16:42:44 mini pop3smvub[5569]: [ID 925991 local6.error] TLS server
engine: cannot load cert/key data
Sep 24 16:42:44 mini pop3smvub[5569]: [ID 528583 local6.error] [pop3d] error
initializing TLS
Sep 24 16:42:44 mini pop3smvub[5569]: [ID 637875 local6.error] Fatal error:
tls_init() failed


Can I still repair this situation or am I heading towards the generation of
completely new CSRs and key ?


Eric Luyten.


----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux