I've got a fresh VPS setup and I'm working on getting ASSP fully setup on it.
It's using LetsEncrypt certs handled by Froxlor hosting.

I've added the paths to the chain, ca, and key files, but ASSP won't accept the key file.
It gives the error:
[Worker_1] Error: can't create SSL-Context for 'SMTP' - - Failed to load key from file (no PEM or DER) error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error error:04093004:rsa routines:OLD_RSA_PRIV_DECODE:RSA lib error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error error:140B000D:SSL routines:SSL_CTX_use_PrivateKey_file:ASN1 lib

The file LOOKS like a standard PEM file - starts with "-----BEGIN PRIVATE KEY-----" and whatnot. However, when I try to test it at the command line with openssl saying it's an X509 I get:
unable to load certificate
140056015140496:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:696:Expecting: TRUSTED CERTIFICATE

And if I try to test it saying it's a DER (which it shouldn't be) I get:
unable to load certificate
139815418173072:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1199: 139815418173072:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:374:Type=X509

So needless to say I'm a tad confused.  :)
Apache seems to be working just fine with the certs, so I'm a bit lost as to why ASSP doesn't like it.
Any suggestions?

Thanks!

Mark II

--
Mark D Montgomery II
techi...@techiem2.net
https://www.techiem2.net


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to