Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 79520 - problem creating newcert.pem with openssl-0.9.7d-r2
Summary: problem creating newcert.pem with openssl-0.9.7d-r2
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: x86 Linux
: High normal
Assignee: Daniel Ahlberg (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-01-25 15:00 UTC by eviltone
Modified: 2005-02-06 00:39 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description eviltone 2005-01-25 15:00:07 UTC
when working with the virtual mail postfix guide at http://www.gentoo.org/doc/en/virt-mail-howto.xml, 
at code listing 5.1 step "./CA.pl -sign" the following error is seen

Using configuration from /etc/ssl/openssl.cnf
unable to load CA private key
10712:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=CA_default name=unique_subject
10712:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: ANY PRIVATE KEY
Signed certificate is in newcert.pem 

this manifests itself in postfix log as

Jan 25 18:13:26 zippy postfix/smtpd[10332]: starting TLS engine
Jan 25 18:13:26 zippy postfix/smtpd[10332]: unable to get certificate from '/etc/postfix/newcert.pem'
Jan 25 18:13:26 zippy postfix/smtpd[10332]: 10332:error:02001002:system library:fopen:No such file or directory:bss_file.c:276:fope$
Jan 25 18:13:26 zippy postfix/smtpd[10332]: 10332:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:278:
Jan 25 18:13:26 zippy postfix/smtpd[10332]: 10332:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa$
Jan 25 18:13:26 zippy postfix/smtpd[10332]: TLS engine: cannot load RSA cert/key data

this sproblem was solved by updating openssl to the masked 'e' version, and redoing code section 5.1

Reproducible: Always
Steps to Reproduce:
1.
2.
3.
Comment 1 SpanKY gentoo-dev 2005-02-06 00:39:07 UTC
0.9.7e now stable