Re: SSL Certificate

Niels Dettenbach via Info-cyrus <[email protected]> Fri, 25 Nov 2016 16:01:12 +0100

Newsgroups	gmane.mail.imap.cyrus
Organization	Syndicat IT&Internet
Message-ID	<87077410.2smI3aWrcp@gongo>

Am Freitag, 25. November 2016, 14:46:12 schrieb Ken Smith via Info-cyrus:
>   unable to get certificate from 
> '/etc/pki/tls/cyrus-imapd/2_imap2.kensnet.net.pem'
what's your ssl/tls config in imapd.conf?

Did you copied the key content as text with a mouse over text terminals or so?

You need at least:

	tlscache_db: ...
	tls_cert_file: ...
	tls_key_file ...
	tls_ca_file: ...

on some systems the:
	tls_ca_path:

seems required too (to point where your root certs are to find).

and (optionally) for security details:

	tls_cipher_list:
	tls_session_timeout:


I remember struggling with some cross-chain certified certificate in the past 
on a linux system - i solved that by recreate the ca file 

Check with openssl s_client against your apache, what he is delivering on SSL 
and compare to your certificate chain you installed / use in cyrus.

hth,
good luck so far and best regards,


Niels.
-- 
 ---
 Niels Dettenbach
 Syndicat IT & Internet
 http://www.syndicat.com
 PGP: https://syndicat.com/pub_key.asc
 ---

----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

signature.asc (application/pgp-signature, 833 B)