Monday, September 16, 2013

454 4.7.0 TLS not available due to local problem

In /var/log/syslog, I found following error messages

Sep 16 15:16:22 main2 postfix/smtpd[24908]: warning: TLS library problem: 24908:error:0906406D:PEM routines:PEM_def_callback:problems getting password:pem_lib.c:105:
Sep 16 15:16:22 main2 postfix/smtpd[24908]: warning: TLS library problem: 24908:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:403:
Sep 16 15:16:22 main2 postfix/smtpd[24908]: warning: TLS library problem: 24908:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:669:
Sep 16 15:28:55 main2 postfix/smtpd[26361]: warning: TLS library problem: 26361:error:0906406D:PEM routines:PEM_def_callback:problems getting password:pem_lib.c:105:
Sep 16 15:28:55 main2 postfix/smtpd[26361]: warning: TLS library problem: 26361:error:0906A068:PEM routines:PEM_do_header:bad password read:pem_lib.c:403:
Sep 16 15:28:55 main2 postfix/smtpd[26361]: warning: TLS library problem: 26361:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:669:



Then, i use following solution and it worked for me,


To create a new ssl cert for postfix, run these commands:


cd /etc/postfix/ssl/

openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
(Create your pass phrase)

chmod 600 smtpd.key

openssl req -new -key smtpd.key -out smtpd.csr

openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt

openssl rsa -in smtpd.key -out smtpd.key.unencrypted

mv -f smtpd.key.unencrypted smtpd.key

openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650




No comments:

Post a Comment