Qmail-remote TLS

[clouedin]

Hi all,

I've got a problem with the use of X.509 certificate with qmail-remote.

I created /var/qmail/control/tlsdestinations file which contains only "*:"
I created /var/qmail/control/servercert.pem file which contains my X.509 certificat, but each time my server try to use STARTTTLS to send mail I have this error in my qmail logs :

deferral: Can't_load_X.509_certificate:_servercert.pem?._(#4.4.1)/

Can anyboby help me to find what is wrong ?

 

[EQ Admin]

Which directions did you follow to set this up? Do the necessary qmail processed have the proper dir and file permissions?

 

[clouedin]

Thank you for your reply.

I followed this : Setting up an SMTP service

and put the file permissions it told :
-rw-r----- 1 root qmail 5758 29 mars 08:03 clientcert.pem
-rw-r----- 1 root nofiles 5758 29 mars 08:03 servercert.pem

 

[clouedin]

Any Idea ?

 

[EQ Admin]

Does your qmaild user (or the user listed in your run file) have access all the way through to read /var/qmail/control/servercert.pem ?

 

[clouedin]

I finally found where the probelm was : in my domaincert file, I didn't put the fully qualified path to severcert.pem (/var/qmail/control/servercert.pem).
It works fine now.
Thank you!