Re: SSL Certificate

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Am Freitag, 25. November 2016, 14:46:12 schrieb Ken Smith via Info-cyrus:
>   unable to get certificate from 
> '/etc/pki/tls/cyrus-imapd/2_imap2.kensnet.net.pem'
what's your ssl/tls config in imapd.conf?

Did you copied the key content as text with a mouse over text terminals or so?

You need at least:

	tlscache_db: ...
	tls_cert_file: ...
	tls_key_file ...
	tls_ca_file: ...

on some systems the:
	tls_ca_path:

seems required too (to point where your root certs are to find).

and (optionally) for security details:

	tls_cipher_list:
	tls_session_timeout:


I remember struggling with some cross-chain certified certificate in the past 
on a linux system - i solved that by recreate the ca file 

Check with openssl s_client against your apache, what he is delivering on SSL 
and compare to your certificate chain you installed / use in cyrus.

hth,
good luck so far and best regards,


Niels.
-- 
 ---
 Niels Dettenbach
 Syndicat IT & Internet
 http://www.syndicat.com
 PGP: https://syndicat.com/pub_key.asc
 ---
 



Attachment: signature.asc
Description: This is a digitally signed message part.

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux