dovecot - Oct 2020 - Problem reading SSL key

All;

    I'm trying to setup dovecot to use SSL, but I'm getting an error
message
in the logs. I'm getting the error imap-login: Fatal: Couldn't parse
private
ssl_key. I'm using a commercial cert so I know that the .crt and .key files
themselves are not the problem. I have them configured like so:

 

ssl_cert = </etc/pki/tls/certs/mail_acmewidgets_net.crt

ssl_key = </etc/pki/tls/private/mail_acmewidgets_net.key 

 

The crt is mode 444 and the key is mode 400. 

 

Since the log is not giving any other information, I don't know what the
problem is. Any insight at all would be greatly appreciated.

Thanks;

Frank

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20201017/c9d878ce/attachment.html>

On 17/10/2020 19:13, Tech Support wrote:
>
> All;
>
> ??? I?m trying to setup dovecot to use SSL, but I?m getting an error
> message in the logs. I?m getting the error imap-login: Fatal: Couldn't
> parse private ssl_key. I?m using a commercial cert so I know that the
> .crt and .key files themselves are not the problem. I have them
> configured like so:
>
> ?
>
> ssl_cert = </etc/pki/tls/certs/mail_acmewidgets_net.crt
>
> ssl_key = </etc/pki/tls/private/mail_acmewidgets_net.key
>
> ?
>
> The crt is mode 444 and the key is mode 400.
>
> ?
>
> Since the log is not giving any other information, I don?t know what
> the problem is. Any insight at all would be greatly appreciated.
>
> Thanks;
>
> Frank
>
Frank

it might help having the full error message that was in the log
including any error code.

Despite your certainty of the private key file, that's where I would
suggest looking. Is your key file in PEM format? Does it have a password?

You can use this command (without posting the output) to check an rsa kkey:

openssl rsa -in /etc/pki/tls/private/mail_acmewidgets_net.key -check

You should get somethings like:

RSA key ok
writing RSA key
-----BEGIN RSA PRIVATE KEY-----
<key data is here>
-----END RSA PRIVATE KEY-----

John

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20201017/0bcb6fc7/attachment.html>