you need to also add a blank line between the -- END RSA PRIVATE KEY --  and
the
-- BEGIN CERTIFICATE --  and a blank line at the end, as the stunnel docs
say.



> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Darrin Powell
> Sent: Wednesday, March 28, 2001 10:20 AM
> To: [EMAIL PROTECTED]
> Subject: RE: How do I create an non encrypted key for stunnel ??????
>
>
> On Tue, 27 Mar 2001, you wrote:
>
>   I did your comand to make the cert and the output for
> stunnel.pem the key
> part still looked encrypted ???????
>
>
> this is what stunnel.pem contained
> after making it with the following command
>
> openssl req -nodes -new -x509 -out stunnel.pem -keyout
> stunnel.pem -days 365
>
>
>  more stunnel.pem
> -----BEGIN RSA PRIVATE KEY-----
> MIICWwIBAAKBgQDb/MglbjbtLHy//th98fpDb8cwmK6klZUp6m87JbRwBXPER4sz
> 3QxNZRIkiJcEq7RHZZkjS0CpiQzNDSuYS/sedLkh+QMUL7Id8DrA/lmjsCfU0Wgd
> TM1VniNeZy+hAaJ1Zfr5jzaZBZ48afyDPqKTcfR87lQfVpD1HevC8WWlEQIDAQAB
> AoGAAvsR2y/7HouTxSY22L4GnhNNp6Lp+uDr/H1otGx2XW41e1tcz38XQ5UzAbu4
> ECAjeTQvNwM2BRYOTlj3VkDxThnlWl4D/TL7NmKH51Y+D/8qk0y17HtAL19x3vvJ
> wVedrdmIzOJSlej0hFelmGIN+bOcg8yIpSZ/p6sbeTUTcGECQQD8R3nr5hmYAvWU
> Lw4x5lPft7DPUHgTuFxLMPWF3gO8edgfm6KC4X86yfKUi75fptnuu84JR78tYrXm
> Y88V2H0DAkEA3zth5BLTrqDtC9GAmCe2FzEo050RR+F6lXig6AZVYR3QPYlPOpyH
> eWirzfaGs6MAjPX4ZOuaELt1xZ3FkrdnWwJAHkOc1rXV4CyKtWons8jDyxTIOzaW
> EReOyt5mtdZ6cEPVr4UGK9lNYAoV9cgF4IetoTwabXaT8qfi1m6myyIbbQJAdlhM
> 9VTl1FaMVQ+kVQX4iyMMueMzHiBzlHp3E4sICIx9saHx1ujVCZBsRKzFjMaFrDVa
> kmY1L1myfim+bKG+sQJAQ8KEN6dQ7uX1M/z2TA0FKAnBg8Z4rwrzS+Ba46mAZFIJ
> kkHBHCgH8G8NsbuQ8d68lMvTAoRS+PsLGDA61QjSFw==
> -----END RSA PRIVATE KEY-----
> -----BEGIN CERTIFICATE-----
> MIICiDCCAfGgAwIBAgIBADANBgkqhkiG9w0BAQQFADA9MQswCQYDVQQGEwJVUzEL
> MAkGA1UECBMCTkMxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAe
> Fw0wMTAzMjgxNTE4NTNaFw0wMjAzMjgxNTE4NTNaMD0xCzAJBgNVBAYTAlVTMQsw
> CQYDVQQIEwJOQzEhMB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIGf
> MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDb/MglbjbtLHy//th98fpDb8cwmK6k
> lZUp6m87JbRwBXPER4sz3QxNZRIkiJcEq7RHZZkjS0CpiQzNDSuYS/sedLkh+QMU
> L7Id8DrA/lmjsCfU0WgdTM1VniNeZy+hAaJ1Zfr5jzaZBZ48afyDPqKTcfR87lQf
> VpD1HevC8WWlEQIDAQABo4GXMIGUMB0GA1UdDgQWBBRfM/S/Js4ymoIPCBZ1iRWR
> GQQRhzBlBgNVHSMEXjBcgBRfM/S/Js4ymoIPCBZ1iRWRGQQRh6FBpD8wPTELMAkG
> A1UEBhMCVVMxCzAJBgNVBAgTAk5DMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRz
> IFB0eSBMdGSCAQAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQQFAAOBgQDVDCJ+
> zbOJsD7BMasWNzPW1+02Dp64s01s881KvUU5hIguYnDsO/Ik/GVVmunV1VS5JvNM
> mKhN6ZVdrJt14tgmwEedttTUyptEJ9h+SZCIjn5y4KRrecJ7xPOMSUNWtpMz0bqp
> +B6+MDwceq3SpoLku8Qejz+Ie8PI+OI2r/vpag==
> -----END CERTIFICATE-----
>
> Is this how it should look? I still get this error when I try
> to connect
>
> [root@powell certs]# openssl s_client -connect powell:993
> CONNECTED(00000003)
> write:errno=104
>
>
> What am I doing wrong ????????
>
>
>
> > Aha, finally, something I can contribute.  I did this last week.
> >
> > The openssl command would be
> >
> > openssl req -nodes -new -x509 -out stunnel.pem -keyout
> stunnel.pem -days 365
> >
> > then, look at the stunnel.html to see where to add two blank lines.
> >
> > --
> > Jess Neri   [EMAIL PROTECTED]   (202) 404-4365
> > Pulsed Power Physics Branch, Plasma Physics Division
> > Naval Research Laboratory, Washington DC   20375
> >
> >
> >
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Darrin Powell
> > > Sent: Tuesday, March 27, 2001 3:11 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: How do I create an non encrypted key for stunnel ??????
> > >
> > >
> > >
> > >
> > >
> > >
> > >        I have been working on setting up imap to use ssl. I found
> > > in the man
> > > page for stunnel that the key needs to be unencrypted, but it
> > > doesn't clearly
> > > state how to do this. Please help !!!!!
> > >
> > >
> > >
> > >
> > >
> > > Thanks in advance
> > > Darrin
> > >
> ______________________________________________________________________
> > > OpenSSL Project
> http://www.openssl.org
> > > User Support Mailing List
> [EMAIL PROTECTED]
> > > Automated List Manager
> [EMAIL PROTECTED]
> > >
> >
> >
> ______________________________________________________________________
> > OpenSSL Project
> http://www.openssl.org
> > User Support Mailing List
> [EMAIL PROTECTED]
> > Automated List Manager
> [EMAIL PROTECTED]
> --
> Darrin Powell
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to