Re: [magicmail-users] TLS / DH key problem

[Simon Wilson <simon@linuxmagic.com>]

Hello Joe:

Can you please let us know a bit about your /etc/magic-mail/control/cert.pem 
file? Does it have correct permissions and does it contain your dhparams, 
cert, and key as you have specified? 

Thanks for posting,

-Simon

	-- MagicMail Support Team -- 

On Wednesday 15 March 2006 01:55 pm, Joe Stump wrote:
> I've setup magic-smtpd about a dozen times before (famous last words,
> of course) and have never seen this problem. I'm getting the
> following error when I attempt to send a message via SMTP using TLS
> (regular SMTP sending works when my MUA - Thunderbird and Mail.app -
> turn off TLS). This is from my mail server's log:
>
> Mar 15 13:35:48 dickens msd[2746]: EHLO command received, args:
> [192.168.100.41]
> Mar 15 13:35:48 dickens msd[2746]: HELO host does not match
> TCPREMOTEHOST
> Mar 15 13:35:48 dickens msd[2746]: STARTTLS command received, args: TTLS
> Mar 15 13:35:48 dickens msd[2746]: WARNING generating 1024 bit DH
> key, this will be slow
> Mar 15 13:36:01 dickens msd[2746]: OpenSSL(SSL_accept): [error:
> 0906D06C:PEM routines:PEM_read_bio:no start line]
> Mar 15 13:36:01 dickens msd[2746]: Exiting
>
> Output of magic-smtpd -s (the important parts that is):
>
> loaded  | tls_cadir                     | /usr/lib/courier/rootcerts/
> default | tls_cafile                    | (null)
> default | tls_certificate               | /etc/magic-mail/control/
> cert.pem
> loaded  | tls_dhparams                  | /etc/magic-mail/control/
> cert.pem
> loaded  | tls_enable                    | 1
> default | tls_keyfile                   | /etc/magic-mail/control/
> cert.pem
> default | tls_password                  | (null)
>
> Am I totally missing something? The tls_dhparams is set so why is it
> trying to recreate the key everytime? What is that OpenSSL error all
> about?
>
> Thanks for help in advance!
>
> --Joe
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: magicmail-users-unsubscribe@linuxmagic.com
> For additional commands, e-mail: magicmail-users-help@linuxmagic.com

-- 
Simon Wilson <simon@wizard.ca> Systems Administration
Wizard IT Services - http://www.wizard.ca 
Linux Support Specialist - http://linuxmagic.com
Unix Administration, Website Hosting, Network Services, Programming
(604) 589-0037 Beautiful British Columbia, Canada
LinuxMagic is a TradeMark of Wizard Tower TechnoServices Ltd.
--------------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to which
they are addressed.  If you have received this email in error please
notify the system manager.  Please note that any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of the company.