Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 09 Dec 2009 19:57:00 +0200
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Robert Huff <roberthuff@rcn.com>
Cc:        questions@freebsd.org
Subject:   Re: semi-problem starting sendmail
Message-ID:  <87tyw0jaj7.fsf@kobe.laptop>
In-Reply-To: <19230.57463.718813.429728@jerusalem.litteratus.org> (Robert Huff's message of "Tue, 8 Dec 2009 18:25:43 -0500")
References:  <19230.36867.142189.339269@jerusalem.litteratus.org> <87my1t2m2p.fsf@kobe.laptop> <19230.57463.718813.429728@jerusalem.litteratus.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 8 Dec 2009 18:25:43 -0500, Robert Huff <roberthuff@rcn.com> wrote:
> I just generated new keys using the method specified the the article
> recommended by Giorgos, and I get the same result.

Oops. I was hoping that would help, but it was only a wild guess by
looking at the error message and the Google hits I could find for
related threads.

As Chuck wrote, the error is coming from the TLS support code.  Can you
try the openssl commands he mentioned?

    Date: Tue, 08 Dec 2009 23:33:07 +0200
    From: Chuck Swiger <cswiger@mac.com>
    Subject: Re: semi-problem starting sendmail
    Message-id: <D1ADCE71-7D5E-4E0D-BA3A-03B6E4AF1134@mac.com>

    Well, the error is coming from /usr/src/contrib/sendmail/src/tls.c, and
    depends on openssl to deal with your cert.  Does:

      openssl verify -verbose /etc/mail/CA/private/cakey.pem

    ...say anything interesting?  What about:

      openssl x509 -in /etc/mail/CA/private/cakey.pem -text



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87tyw0jaj7.fsf>