Results 1 to 5 of 5

Thread: TLS library problem

  1. #1
    Join Date
    Nov 2007
    Location
    Erechim, Brasil
    Posts
    12
    Rep Power
    7

    Default TLS library problem

    Hi

    My zimbra installation ocurred ok but when i try to send mail outside lan i have this erros and message does not sent.

    Nov 12 11:05:22 netserver postfix/smtpd[11898]: warning: cannot get certificate from file /opt/zimbra/conf/smtpd.crt
    Nov 12 11:05:22 netserver postfix/smtpd[11898]: warning: TLS library problem: 11898:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:644:Expecting: CERTIFICATE:

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    I'd suggest you regenerate your certificates, you should also check your installation logs for any errors.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Nov 2007
    Location
    Erechim, Brasil
    Posts
    12
    Rep Power
    7

    Default

    I did this steps but the error persist.

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Which steps, exactly, did you do. Were there any errors? What was the output from the regeneration steps? Did you restart Zimbra after regenerating the certificates?

    What is in the install log files, any errors? You don't normally get errors like this after an install, have you modified anything? Which operating system and version of Zimbra are you using? At least give us a hint so we have something to work with.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Join Date
    Nov 2007
    Location
    Erechim, Brasil
    Posts
    12
    Rep Power
    7

    Default

    I using Zimbra 4.5.8 Community and Ubuntu Server 6.06-1

    The server has no errors in install log and a altered file /opt/zimbra/conf/zmssl.cnf.in with information about my domain.

    The file /opt/zimbra/conf/smtpd.crt is empty.

    Below is the output of comands:


    zimbra@netserver:~$ zmcreateca
    ** Creating CA private key

    Generating a 1024 bit RSA private key
    ..............................++++++
    ...............++++++
    unable to write 'random state'
    writing new private key to '/opt/zimbra/ssl/ssl/ca/ca.key'
    -----
    ** Creating CA cert

    Signature ok
    subject=/C=BR/ST=RS/L=Erechim/O=Cyber/OU=Cyber/CN=cyber.inf.br
    Getting Private key
    unable to write 'random state'


    zimbra@netserver:~$ zmcreatecert
    ** Importing CA

    Certificate was added to keystore
    ** Creating keystore

    ** Creating server cert request

    Generating a 1024 bit RSA private key
    ..........++++++
    ...++++++
    unable to write 'random state'
    writing new private key to '/opt/zimbra/ssl/ssl/server/server.key'
    -----
    ** Signing cert request

    Using configuration from /opt/zimbra/ssl/ssl/zmssl.cnf
    Check that the request matches the signature
    Signature ok
    BR:invalid type in 'policy' configuration
    unable to write 'random state'
    Signature ok
    subject=/C=US/ST=NA/L=NA/O=Zimbra/OU=Zimbra/CN=cyber.inf.br
    Getting CA Private Key
    unable to write 'random state'


    zimbra@netserver:~$ zmcreatecert cyber.inf.br
    ** Importing CA

    Certificate was added to keystore
    ** Creating keystore

    ** Creating server cert request

    Generating a 1024 bit RSA private key
    ....++++++
    ...........................++++++
    unable to write 'random state'
    writing new private key to '/opt/zimbra/ssl/ssl/server/server.key'
    -----
    ** Signing cert request

    Using configuration from /opt/zimbra/ssl/ssl/zmssl.cnf
    Check that the request matches the signature
    Signature ok
    BR:invalid type in 'policy' configuration
    unable to write 'random state'
    Signature ok
    subject=/C=US/ST=NA/L=NA/O=Zimbra/OU=Zimbra/CN=cyber.inf.br
    Getting CA Private Key
    unable to write 'random state'


    zimbra@netserver:~$ zmcertinstall mailbox /opt/zimbra/ssl/ssl/server/tomcat.crt
    ** Importing server cert

    Certificate reply was installed in keystore


    zimbra@netserver:~$ zmcertinstall mta /opt/zimbra/ssl/ssl/server/server.crt /opt/zimbra/ssl/ssl/server/server.key
    ** Importing server cert


    zimbra@netserver:~$ zmprov -l gcf zimbraCertAuthorityKeySelfSigned
    zimbraCertAuthorityKeySelfSigned: -----BEGIN RSA PRIVATE KEY-----
    MIICXAIBAAKBgQCwlVq+nFVb1RhQYDDgskyc0+sGbbOJGe2a5O onJG212lz/LNg1
    bwPZQoP47MlyrqVbC8WWjzpeNMEC7ZhlaE3qwVSIk1CGmj0gLf 3vTkK2XlsxVwoo
    h5eEHyaeiJO2bpc855v6060r+TqTq4LnP+qtxqS9XwlcgfhYT4 S68Mk2BQIDAQAB
    AoGBAJds/IxIc8p0So1ib4fAXoJ+GCVDHZqMaX1SoJlAW/R+dRE924q20I4WxCVK
    qNV3fsU8qwwZduwiQQHJzc3oTCd+tJ9mg6tREYDRpjAl7J/o/sbATCGduAvZajlk
    q4DiiLjbDq8HLwk3ZnymPs+P7v21ywH0tl40eke48KfxlT9hAk EA4QhFywGzZuHS
    KKatX3RUGeJ9a/GxexZpMe9anfhpYO2xDcqX2oDVhoNhikssv8ThmDPhM7EQKf4r
    zgjtC435gwJBAMjiQwXz2/YdBJ0fkSyEFwbtm4sYmiIkktklQCGu/YwkhSo1oIhJ
    c9Ov7PFRbfrHdjsn1TXWqc12M2o7ezyFY9cCQEh18HtZFdqoFp MOcL9O5xHas4ZB
    smOvKLpyl1xMtCoI/70wIkuyto702UC9yjAKBpaLBhYuCsVq2dIjX6kb018CQQCN
    P1LDH7l9LuAsnqKUO3h5fZ7NygmukirTFjcmuAU9gfxENpre2U 7g/KVM9OWw3IkM
    hTCMf5i7iC4Utygq4NvXAj8WLZuM3+X2O67sRB9OoPg3jvmgxL 4GPP9bWqwEGRjg
    uldREz18n9apnZvlb4ZB4OhpnwI9HZ2DPmcCyFlZdYc=
    -----END RSA PRIVATE KEY-----


    zimbra@netserver:~$ zmprov -l gcf zimbraCertAuthorityCertSelfSigned
    zimbraCertAuthorityCertSelfSigned: -----BEGIN TRUSTED CERTIFICATE-----
    MIICPTCCAaYCCQDy1FHYnJEDmTANBgkqhkiG9w0BAQUFADBjMQ swCQYDVQQGEwJC
    UjELMAkGA1UECBMCUlMxEDAOBgNVBAcTB0VyZWNoaW0xDjAMBg NVBAoTBUN5YmVy
    MQ4wDAYDVQQLEwVDeWJlcjEVMBMGA1UEAxMMY3liZXIuaW5mLm JyMB4XDTA3MTEx
    MjE2MDAyNFoXDTA4MTExMTE2MDAyNFowYzELMAkGA1UEBhMCQl IxCzAJBgNVBAgT
    AlJTMRAwDgYDVQQHEwdFcmVjaGltMQ4wDAYDVQQKEwVDeWJlcj EOMAwGA1UECxMF
    Q3liZXIxFTATBgNVBAMTDGN5YmVyLmluZi5icjCBnzANBgkqhk iG9w0BAQEFAAOB
    jQAwgYkCgYEAsJVavpxVW9UYUGAw4LJMnNPrBm2ziRntmuTqJy Rttdpc/yzYNW8D
    2UKD+OzJcq6lWwvFlo86XjTBAu2YZWhN6sFUiJNQhpo9IC3970 5Ctl5bMVcKKIeX
    hB8mnoiTtm6XPOeb+tOtK/k6k6uC5z/qrcakvV8JXIH4WE+EuvDJNgUCAwEAATAN
    BgkqhkiG9w0BAQUFAAOBgQAxacCY0ce4ZqjEO7MiRwxO6aKhUw xYB8pa2o/Ttckp
    In9foK6YUhtvs/p81IC0TCsOsPMTiSjBzuHe5QG28W+4GBCS24xissVYociGAHOS
    PFugO4vhMUi5+h+h4tBjge6BLHVjXrYtQCsJ+ORXBbSdse+JmY l0CyVmnvLbDKyc
    zw==
    -----END TRUSTED CERTIFICATE-----


    zimbra@netserver:~$ zmcontrol stop
    Host cyber.inf.br
    Stopping stats...Done
    Stopping mta...Done
    Stopping spell...Done
    Stopping snmp...Done
    Stopping antivirus...Done
    Stopping antispam...Done
    Stopping imapproxy...Done
    Stopping mailbox...Done
    Stopping logger...Done
    Stopping ldap...Done
    zimbra@netserver:~$ zmcontrol start
    Host cyber.inf.br
    Starting ldap...Done.
    Starting logger...Done.
    Starting mailbox...Done.
    Starting antispam...Done.
    Starting antivirus...Done.
    Starting snmp...Done.
    Starting mta...Done.
    Starting stats...Done.

Similar Threads

  1. TLS not working?
    By 3RiversTechAdmin in forum Installation
    Replies: 9
    Last Post: 04-06-2009, 06:12 AM
  2. postfix tls problem on mandriva 2007
    By dkn in forum Installation
    Replies: 3
    Last Post: 12-31-2007, 02:27 PM
  3. Problem in Outlook 2003 with SMTPS
    By m.a.g. in forum Installation
    Replies: 6
    Last Post: 03-06-2007, 01:35 PM
  4. Certificate problem with SMTP using TLS
    By yuit in forum Installation
    Replies: 4
    Last Post: 11-02-2006, 05:03 PM
  5. Supporting SPA and TLS for SMTP relaying
    By pbwebguy in forum Installation
    Replies: 1
    Last Post: 05-18-2006, 07:59 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •