dovecot - Mar 2008 - Can't load private key file

Hi Guys,

I have just purchased and installed an authenticated certificate for the
mail server, but I am getting errors from dovecot.

My mail.err file is showing the following.

Mar  7 17:56:04 mailserver dovecot: pop3-login: Can't load private key file
/etc/ssl/mailserver/mail.mydomain.tld.key: error:0906A068:PEM
routines:PEM_do_header:bad password read

My dovecot.conf has the following set.

# Uncomment these if using SSL
ssl_cert_file = /etc/ssl/mailserver/mail.mydomain.tld.crt
ssl_key_file = /etc/ssl/mailserver/mail.mydomain.tld.key
#ssl_key_password #ssl_ca_file = /etc/ssl/mailserver/ca/mydomain.pem
#ssl_verify_client_cert = yes
ssl_parameters_regenerate = 168
verbose_ssl = no

I have been playing about with it all for about 3 hours now and would
greatly appreciate any help ;)

Regards
Adam


--------------------------------------------------------------------
myhosting.com - Premium Microsoft? Windows? and Linux web and application
hosting - http://link.myhosting.com/myhosting

On Fri, 7 Mar 2008, adamsh at fsfa.org wrote:
> Hi Guys,
> 
> I have just purchased and installed an authenticated certificate for the
> mail server, but I am getting errors from dovecot.
> 
> My mail.err file is showing the following.
> 
> Mar  7 17:56:04 mailserver dovecot: pop3-login: Can't load private key
file
> /etc/ssl/mailserver/mail.mydomain.tld.key: error:0906A068:PEM
> routines:PEM_do_header:bad password read
> 
> My dovecot.conf has the following set.
> 
> # Uncomment these if using SSL
> ssl_cert_file = /etc/ssl/mailserver/mail.mydomain.tld.crt
> ssl_key_file = /etc/ssl/mailserver/mail.mydomain.tld.key
> #ssl_key_password > #ssl_ca_file = /etc/ssl/mailserver/ca/mydomain.pem
> #ssl_verify_client_cert = yes
> ssl_parameters_regenerate = 168
> verbose_ssl = no
> 
> I have been playing about with it all for about 3 hours now and would
> greatly appreciate any help ;)
It sounds like you encrypted the key with a password...you would put that 
as the ssl_key_password in the config above.

Andy

---
Andy Dills
Xecunet, Inc.
www.xecu.net
301-682-9972
---