Eric Luyten wrote: > Colleagues, > > I am in the process of moving Cyrus service from a Cyrus 2.2.13 / Solaris9 > system to a Cyrus 2.3.15 / Solaris10 system and all is running pretty well > > EXCEPT > > for authenticated IMAP/POP sessions. > > CSRs and key on the first server were generated using OpenSSL 0.9.7e while > there is OpenSSL 0.9.8k on the second one (if that matters). > > I copied the three files referenced by > tls_cert_file: > tls_key_file: > tls_ca_file: > in /etc/imapd.conf to the new server but appear to have overlooked something, > because my logfile now shows : > > Sep 24 16:42:44 mini pop3smvub[5569]: [ID 897861 local6.error] unable to get > certificate from '/usr/local/ssl/official/popimap-vub.crt' > Sep 24 16:42:44 mini pop3smvub[5569]: [ID 925991 local6.error] TLS server > engine: cannot load cert/key data > Sep 24 16:42:44 mini pop3smvub[5569]: [ID 528583 local6.error] [pop3d] error > initializing TLS > Sep 24 16:42:44 mini pop3smvub[5569]: [ID 637875 local6.error] Fatal error: > tls_init() failed > > > Can I still repair this situation or am I heading towards the generation of > completely new CSRs and key ? Does the cyrus user have permissions to read the cert and key? > > > Eric Luyten. > > > ---- > Cyrus Home Page: http://cyrusimap.web.cmu.edu/ > Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
