Bug#390415: [Pkg-openssl-devel] Bug#390415: openssl: Cannot Get Private Key from Cert Created

[Mohamed Sulaiman Sultan Suhaibuddeen]

I generate the key using:

openssl req -new -outform PEM -out /etc/postfix/smtpd.cert -newkey rsa:2048 \
-nodes -keyout /etc/postfix/smtpd.key -keyform PEM -days 3650 -x509

I was following a guide from: http://workaround.org/articles/ispmail-sarge/

I would appreciate if you can assist me in properly creating and testing the key.

Thank you

Regards

> On Sat, Oct 07, 2006 at 09:25:20PM +0800, Mohamed Sulaiman Sultan
> Suhaibuddeen wrote:
>>
>>
>> I had regenerate my cert, but this is shown in my mail.log, is these
>> normal? please advice
>
> How do you exactly generate your cert?
>
> Afaik, postfix has 2 lines in it's config file, one for the certificate,
> and one for the key. They can both point to the same file.
>
> You need a file with: "-----BEGIN CERTIFICATE-----" in it, and one with
> "-----BEGIN RSA PRIVATE KEY-----" (or DSA).
>
> That mail.log file really don't look normal.
>
> Can you try connecting to it using the openssl s_client?
> Something like:
> openssl s_client -connect localhost:25 -starttls smtp -crlf
>
>
>
> Kurt
>
>