dovecot - Aug 2015 - Multidomain / IP Address Setup (Dovevot 2.2.10 on CentOS7 ) is failing: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM

I think you should post doveconf -n output.

On 08/14/15 20:30, dravion.smith at gmx.net wrote:
>
> ### CORRECTION
> Am 15.08.2015 um 03:22 schrieb dravion.smith at gmx.net:
>>
>> #### BUT ####
>> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf
>>
>> local imap.mydomain01.tld {
>> protocol imap {
>> ssl_cert = 
>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem
>> ssl_key  = 
>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem
>> }
>> }
>>
>> local imap.mydomain02.tld {
>> protocol imap {
>> ssl_cert = 
>> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.crt.pem
>> ssl_key  = 
>> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.key.pem
>> }
>> }
>>
>> It throws errors like this
>> "imap-login "parse private ssl_key: error:0906D06C:PEM"
>> in the logfile /var/maillog

>I think you should post doveconf -n output.
with your dovecot -n output provided this mail would not need to be sent
>On 08/14/15 20:30, dravion.smith at gmx.net wrote:
>>
>> ### CORRECTION
>> Am 15.08.2015 um 03:22 schrieb dravion.smith at gmx.net:
>>>
>>> #### BUT ####
>>> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf
>>>
>>> local imap.mydomain01.tld {
>>> protocol imap {
>>> ssl_cert = 
>>>
</etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem
>>> ssl_key  = 
>>>
</etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem
>>> }
>>> }
>>>
>>> local imap.mydomain02.tld {
>>> protocol imap {
>>> ssl_cert = 
>>>
</etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.crt.pem
>>> ssl_key  = 
>>>
</etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.key.pem
>>> }
>>> }
>>>
>>> It throws errors like this
>>> "imap-login "parse private ssl_key:
error:0906D06C:PEM"
>>> in the logfile /var/maillog
from the dovecot

from the dovecot ssl wiki page http://wiki2.dovecot.org/SSL/DovecotConfiguration

Multiple SSL certificates
Different certificates per IP and protocol

If you have multiple IPs available, this method is guaranteed to work with all
clients.

[snip]

Note that you will still need a top-level
"default"?ssl_key?and?ssl_cert?as well, or you will receive errors.

in addition to your two domain specific ssl certs have you also defined a
"default" ssl_key and ssl_cert as required as required by the
documentation?

regards
- c

Am 15.08.2015 um 08:16 schrieb Christian Kivalo:
> [snip]
>
> Note that you will still need a top-level "default" ssl_key and
ssl_cert as well, or you will receive errors.
>
> in addition to your two domain specific ssl certs have you also defined a
"default" ssl_key and ssl_cert as required as required by the
documentation?
>
> regards
> - c
Did you really read the wiki and thadt i allready said it was my main 
source??

1) Domains works flawless
2) If i change the domainnames and certificates it works flawless
but
3) If i try (like described in the Wiki you posted) i get this

"imap-login "parse private ssl_key: error:0906D06C:PEM"

Its the fucking imap-login process screwing things up without any reason if you
try to configure it like
described in the damm wiki!