Re: [qmailtoaster] Certificate Error

[Gary Bowling]

Rocky 9.3.

Gary

On 3/22/2024 8:31 PM, Eric Broch wrote:

What are you running EL 8 or 9?

On 3/22/2024 6:28 PM, Gary Bowling wrote:

Yea did that.

I tried what Remo suggested, which was to change the client send config to:

port 465

SSL/TLS

Normal Password

This should send mail through the /var/qmail/supervise/smtps/ config. That worked, which told me my certs were actually ok.

So now I needed to figure out how to make "Port 587, startTLS, and Encrypted Password" work. Which goes through /var/qmail/supervise/submission

I changed the run file in that directory by removing the line:

export SMTPAUTH="!"

and adding the lines

export FORCETLS=1

export SMTPAUTH="!+cram"

And now I can send mail through the submission port by configuring a client to "Port 587, startTLS, and Encrypted Password" and I can also send mail through "port 465, SSL/TLS, normal password"

That allows me to not have to reconfigure the clients who have configurations on port 587.

Eric - Do you see anything wrong with doing it that way?

Thanks, Gary

On 3/22/2024 8:08 PM, Eric Broch wrote:

 cat /etc/letsencrypt/live/mydomain.com/fullchain.pem /etc/letsencrypt/live/mydomain.com/privkey.pem > /var/qmail/control/servercert.pem

On 3/22/2024 4:29 PM, g...@gbco.us wrote:

I can send mail via the roundcube web mail. That's where this message is coming from.

When sending mail from thunderbird, I have my smtp server set up in my client as

Port 587
startTLS
Encrypted Password

This is the same as I had with a number of clients on my old server.

When I try to send email, I get this error.

Sending of the message failed.
An error occurred while sending mail: Outgoing server (SMTP) error. The server responded:  TLS no valid RSA private key: error:FFFFFFFF80000002:system library::No such file or directory (#4.3.0).


To create certificates on my new server. I retrieved certs from letencrypt and then did this.

cp -p /var/qmail/control/servercert.pem /var/qmail/control/servercert.pem.lastmonth
cat /etc/letsencrypt/live/mail.gbco.us/{cert,chain,fullchain,privkey}.pem > /var/qmail/control/servercert.pem

chown vpopmail:qmail /var/qmail/control/servercert.pem
chmod 640 /var/qmail/control/servercert.pem



Any idea what's going on with this error?

thanks, Gary

---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com