TLS not available

Issue #897 closed
Thoth created an issue

Hello,

i upgraded from version 1.3.1 to version 1.3.4. All seems fine, no errors. But now our mailserver reports when trying to send the mail to piler:

"RECEIVED: 220 archiv01.local ESMTP"
"SENT: EHLO kassrvmail"
"RECEIVED: 250-archiv01.local[nl]250-PIPELINING[nl]250-STARTTLS[nl]250-SIZE[nl]250 8BITMIME"
"SENT: STARTTLS"
"RECEIVED: 454 TLS not available currently"

So piler advertises TLS but denies the request to do so. I checked /usr/local/etc/piler/piler.conf, but there TLS is enabled:

pemfile=/usr/local/etc/piler/piler.pem
tls_enable=1

In /var/log/mail.log, i can find one line:

Apr  9 12:09:28 archiv01 piler-smtp[1174]: cannot load private key from /usr/local/etc/piler/piler.pem

I checked the pem-file, it's there and the rights to it seem ok:

-rw------- 1 root root 2964 März 14 15:04 /usr/local/etc/piler/piler.pem

The file itself seems also ok, it has two sections

-----BEGIN RSA PRIVATE KEY-----
[...]
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
[...]
-----END CERTIFICATE-----

If i disable the usage of TLS on our mailserver, the mail is devlivered to piler.

What can i do to get TLS working? Thank you.

Best regards Apophis

Comments (4)

  1. Thoth reporter

    Hello,

    i found a solution: The rights to piler.pem were not correct. A

    chown piler:piler piler.pem
    

    solved the issue.

    Thank you.

    Best regards Apophis

  2. Log in to comment