Can't get SMTP working through SSL

I always get this error in the log:
Sep 11 18:00:05 192 postfix/smtpd[2314]: warning: cannot get private key from file /etc/certificates/www.mydomain.com.key
Sep 11 18:00:05 192 postfix/smtpd[2314]: warning: TLS library problem: 2314:error:0906406D:PEM routines:DEF_CALLBACK:problems getting password:pem_lib.c:105:
Sep 11 18:00:05 192 postfix/smtpd[2314]: warning: TLS library problem: 2314:error:0906A068:PEM routines:PEMdoheader:bad password read:pem_lib.c:401:
Sep 11 18:00:05 192 postfix/smtpd[2314]: warning: TLS library problem: 2314:error:140B0009:SSL routines:SSLCTX_use_PrivateKeyfile:PEM lib:ssl_rsa.c:709:
The SSL certificate is otherwise valid and fully functional with IMAP and HTTPS, but it doesn't want to work with SMTP server. I've tryed everything, also a brand new self signed certificate, but I still get the same error.
Other useful info from postconf:
postconf -n
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
html_directory = no
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 10485760
mydestination = $myhostname,localhost.$mydomain,localhost,Xserve.local
mydomain = mydomain.com
mydomain_fallback = localhost
myhostname = mail.mydomain.com
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdenforcetls = no
smtpdpw_server_securityoptions = login
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpdtlsCAfile =
smtpdtls_certfile = /etc/certificates/mail.mydomain.com.crt
smtpdtls_keyfile = /etc/certificates/mail.mydomain.com.key
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = yes
unknownlocal_recipient_rejectcode = 550
virtualmailboxdomains = hash:/etc/postfix/virtual_domains
virtual_transport = lmtp:unix:/var/imap/socket/lmtp

You cannot use SSL certificates protected with a passphrase in postfix.
See here:
http://discussions.apple.com/thread.jspa?messageID=6251145&#6251145
HTH,
Alex

Similar Messages

  • Can't get SMTP working with SSL on Panther Server

    mail client is mail.app
    mail server on panther server (ie the default one)
    all works fine without SSL
    if i turn on the SSL option for IMAP in mail.app, it works
    but if I turn on the SSL option for SMTP, it doesn't.
    Mail.app tells me that "Starting TLS failed on SMTP server"
    the server SMTP log tells me "Lost connection after STARTTLS"
    Means nothing to me.
    What do I do / hit / press / delete / click / copy / edit?
    I'm guessing that TLS here is not the Times Literary Supplement, right?
    Thanks for help and stuff
    G5 1.6GHz    

    In Server Admin, make sure you set SMTP to 'use' not to 'require'
    Otherwise other servers won't be able to send mail to you.
    You still need to authenticate with whatever your server requires.
    In Outgoing Mail Server 'Server Settings':
    Port should be default of 25 unless you decide to setup an alternate port (a very good idea, but save that for later)
    Set Authentication to whatever your server requires (same as when not using ssl)
    Jeff

  • Can't get iChat working through Airport

    First off, thanks for all the great info here, I successfully troubleshooted (-shot?) connecting my iSight to my old G3 tower which is wired to the network, changing my Linksys router settings and everything. The kids saw Grandma (I had to fix her firewall long distance, I did that successfully too), iSight and iChat AV are great!
    But now I'm stumped.
    I have a G3 laptop, I'm running Panther (10.3.9) and iChat 2.1 (though when my new G5 arrives-- MAYBE TOMORROW HOORAY-- I will of course be running Tiger on that and will presumably upgrade the laptop once I'm up to speed). I have a white C-cup Airport, not Extreme, running 4.0.9 of the Airport software; it in turn is connected to the Linksys router and the DSL modem, but since they work with the desktop system, I assume they're not the source of any problem.
    Yet I can't connect to appleu3test03 via wireless like I did via the wired system. I get a failure/check connection doctor message. So are there settings on the Airport I have to change to get through?
    Thanks in advance.

    Hi Michael,
    If the Linksys is the device that connects to the internet it is proably set to do DHCP. This means it issues IP addresses to the other devices on your local LAN. This tends to be a default setting.
    WHen you access the device through a web browser it will have this on the front page of the set up screen of a Linksys in about the fourth section down.
    The Airport will also "Distribute Addresses" by default (In the Network Tab of the Airport Admin Utility)
    This means you have two devices that are DHCP servers and iChat does not like this. IN fact the way the Airport works it wil also pass ton the IP address the Linksys gives the Mac, even though you can not see it. Effectively the Mac belongs to two Subnets of your LAN.
    You can turn the Airport into a Wireless Access Point and contiue to distribute IP addresses from the Linksys.
    Better still you can set each device with a Static address. If you set an Address for the Airport from the Linksys this will end any further spreading of the Subnet form the Linksys and the Airport could carry on doing DHCP or you could arrange to have it as an access point And Static the computers address to the modem through the Airport.
    (Alternatively you could have a static asddress to the Airport and then seperate Static Addresses to the computer from the Airport. This would still be subnets but the computer would not be in both).
    Hope this helps.
    Ralph

  • Static NAT pass-through; can not get to work

    I am not having any luck getting a static NAT pass-through to work.
    BM3.8/NW6.5 all patched to the latest patches (no betas). IPFLT is NOT
    loaded.
    My internal network on one LAN all have 10.100.xxx.xxx private addresses.
    Dynamic NAT works great.
    I have secondary public IP addresses bound to my public NIC. Static NAT
    mapping between the secondary public IP addresses and the couple of
    individual private addresses work just fine. In other words, all has been
    working fine.
    I need to give one of those internal resources its public IP address
    (change it's private to its public).
    OK, I went into the NAT table and changed the proper public <-> private to
    public <-> public (identical addresses). I changed the internal computer
    to it's public address/mask with the same default gateway the server is
    using. The internal computer can now only ping itself; can't even ping
    it's default gateway. I did reinitialize, and also restarted. I can not
    get the pass-through connection to work.
    Any thoughts will be well received.
    Bob

    Robert,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://support.novell.com/forums)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://support.novell.com/forums/faq_general.html
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Can't get Mail working properly

    I just got my new MacPro this week, and it's really great except for I can't get Mail working right. I've set up my accounts and a few emails come through, though not many, and because it's been a week since I've been online, there should be many more than that. Also, I can't send any emails at all, no matter what I do. They will eventually go into my Sent box, but I've been sending them to myself to see if it's working, and they never come through. I spent an hour on the phone yesterday with the tech support for my ISP, and they told me that I'd have to talk to the Apple techs because they didn't have current info for *Mail 3.1*, the version I have, that the latest they had was for 2.something. So I called the Apple tech support and spent 2 hours on the phone with them, and they weren't able to help me get it going correctly either. It keeps giving me error messages such as Connection Failed, or Unable to Receive Mail, saying "there may be a problem with the mail server or network" and that "the connection to the server on ... port has timed out." I'm on DSL and am always online, so I know it's not the internet connection that's the problem. Can anybody give me some advice on what I should try? Any help will be gratefully appreciated!

    Is your ISP Verizon, Demon, or Glocalnet, then it might be Apples biggest Leopard Bug in conjunction with these ISP:s POP-servers.
    The one that randomly changes the settings in "advanced" from "password" to "APOP".
    The visual result of this bug is that you will get a popup-box where Mail asks you to enter your password. (Which is useless entering, since the preference settings are changed.)
    My advice counts only when you are supposed to use "password" as the correct setting in "Advanced" and in conjunction with some ISP:s.
    Michael

  • Can't get webutil working on AS

    Hi All,
    As topic, I can't get webutil working on the application server. I can run individual forms or sessions that do not utilise webutil. As soon as I have baseHTMLjinitiator/baseHTMLjpi/baseHTML defined in the bit of the formsweb.cfg that I am using, I get this problem. The webutiljini.htm etc are located in the forms/server directory as they should be.
    I've got it working fine on my 10.1.2 developer suite XP platform.
    I've been trying without success on the App Server. Version 10.1.2 under Win2003
    I have been right through the installation instructions several time trying to see what I have missed.
    I have installed version 1.0.6 of webutil and version 1.8 of jacob.
    I try and run the wu_test_106 form, and all I get is "Applet Started" at the bottom of the browser window, and a blank browser window.
    My URL is
    http://10.64.125.51:7778/forms/frmservlet?config=webutil1
    The config in the formsweb.cfg is:
    [webutil1]
    WebUtilArchive=frmwebutil.jar,jacob.jar
    WebUtilLogging=off
    WebUtilLoggingDetail=normal
    WebUtilErrorMode=Alert
    WebUtilDispatchMonitorInterval=5
    WebUtilTrustInternal=true
    WebUtilMaxTransferSize=16384
    baseHTMLjinitiator=webutiljini.htm
    baseHTMLjpi=webutiljpi.htm
    baseHTML=webutilbase.htm
    archive_jini=frmall_jinit.jar
    archive=frmall.jar
    lookAndFeel=generic
    form=wu_test_106.fmx
    width=100%
    height=100%
    separateFrame=True
    The other parameters are default. If I try a different form name it makes no difference.
    I've done the other configuration stuff, default.env, signing jar files, etc.
    The java console just shows:
    Oracle JInitiator: Version 1.3.1.22
    Using JRE version 1.3.1.22-internal Java HotSpot(TM) Client VM
    User home directory = C:\Documents and Settings\griggto01
    Proxy Configuration: Manual Configuration
    Proxy:
    Proxy Overrides:
    JAR cache enabled
    Location: C:\Documents and Settings\griggto01\Oracle Jar Cache
    Maximum size: 50 MB
    Compression level: 0
    c: clear console window
    f: finalize objects on finalization queue
    g: garbage collect
    h: display this help message
    l: dump classloader list
    m: print memory usage
    q: hide console
    s: dump system properties
    t: dump thread list
    x: clear classloader cache
    0-5: set trace level to <n>
    Loading http://10.64.125.51:7778/forms/java/frmwebutil.jar from JAR cache
    RegisterWebUtil - Loading WebUtil Version 1.0.6
    Thanks for your help.
    Tony

    Hi Tony,
    Form your post it doesn't look like jacob.jar is being loaded. Can you confirm that you have the following files in the <ORACLE_AS>/forms directory:
    java\
       jacob.jar
       frmwebutil.jar
    webutil\
       d2kwut60.dll
       jacob.dllAlso open up your default.env file and check that
    ORACLE_HOME         -- is correct
    FORMS_PATH            -- has the path where wu_test_106.fmx is located
    WEBUTIL_CONFIG      -- is correct (I've experienced what you describe when this path was invalid)
    CLASSPATH             -- contains frmwebutil.jar
    Regards
    Tom Casserly

  • I can't get a signal through whole house because of a brick wall   What range extender do you recommend to be used with my wireless router ( apple brand)

    I can't get a signal through whole house because of a brick wall   What range extender do you recommend to be used with my wireless router ( apple brand)

    Very few 3rd party wireless extenders will work with an Apple router, so your best bet is always to use an extender that is the same brand as the main router. An AirPort Express is a popular choice for this type of application with another Apple router.
    If you had a Cisco router, then a Cisco extender would be your best bet.  Same for Netgear, etc.
    But......a wireless extender can only "extend" the quality of wireless signal that it receives, and not much of a wireless signal is going to make it through a brick wall, so whether any extender might do what you want is open to question.
    You won't know whether an extender using wireless to connect will work to your satisfaction in your home until you actually try it out in your home.
    The performance will always be much better if you can connect the extending device back to the main router using a wired Ethernet cable connection.
    If it is not possible to run the Ethernet cable, a pair of Ethernet power line adapters might be able to send the signal over the existing AC power lines in your home. The theory with these devices is that you already have the wiring in place, you just need the adapters.
    In practice though, things do not always work as well as the theory might suggest, so if you decide to try a pair of adapters, it might be a good idea to understand the store's return policies before you buy.

  • After moving to iCloud I can only get my email through the cloud, no new emails are making it to my home computer. Does anyone have any advice on how to fix this issue?

    After moving to iCloud I can only get my email through the cloud, no new emails are making it to my home computer and .mac account. Does anyone have any advice on how to fix this issue?

    Welcome to the Apple Community.
    Which OS are you using.

  • Can t get to work tint2 launcher

    I'm a beginner in arch linux and i'm trying to figure out why the laucher don't show up in my panel,
    i've set up the panel the way i want but i would like to have a few launcher
    I've try serveral thing but i can't get it to work,
    and chromium.desktop and gparted.desktop do exist in /usr/share/applications/
    tks
    Here my tint2rc
    # TINT2 CONFIG FILE
    # horizontal panel
    # squared taskbars
    # idirae config
    # Background definitions
    # ID 1
    rounded = 0
    border_width = 1
    background_color = #808080 20
    border_color = #ffffff 10
    # ID 2 - task active
    rounded = 0
    border_width = 0
    background_color = #feffff 0
    border_color = #d8d8d8 0
    # ID 3 - task
    rounded = 0
    border_width = 0
    background_color = #F5F5DC 0
    border_color = #000000 0
    # ID 4
    rounded = 0
    border_width = 1
    background_color = #888888 0
    border_color = #ED2323 60
    # ID 5 - taskbar
    rounded = 0
    border_width = 1
    background_color = #feffff 10
    border_color = #ffffff 10
    # ID 6 - active taskbar
    rounded = 0
    border_width = 1
    background_color = #feffff 30
    border_color = #ffffff 30
    # ID 7 - tooltip
    rounded = 3
    border_width = 0
    background_color = #222222 90
    border_color = #222222 90
    # ID 8
    rounded = 0
    border_width = 1
    background_color = #888888 20
    border_color = #888888 20
    # Panel
    panel_monitor = all
    panel_position = top left horizontal
    panel_items = LTSBC
    panel_size = 100% 32
    panel_margin = 0 1
    panel_padding = 3 3
    panel_dock = 0
    wm_menu = 1
    panel_layer = bottom
    panel_background_id = 1
    # Panel Autohide
    autohide = 0
    autohide_show_timeout = 0.3
    autohide_hide_timeout = 1.5
    autohide_height = 6
    strut_policy = follow_size
    # Taskbar
    taskbar_mode = multi_desktop
    taskbar_padding = 5 2
    taskbar_background_id = 5
    taskbar_active_background_id = 6
    taskbar_name = 1
    taskbar_name_background_id = 0
    taskbar_name_active_background_id = 0
    taskbar_name_font = Crisp 12
    taskbar_name_font_color = #ffffff 30
    taskbar_name_active_font_color = #ffffff 50
    # Tasks
    urgent_nb_of_blink = 20
    task_icon = 1
    task_text = 0
    task_centered = 1
    task_maximum_size = 20 20
    task_padding = 0 0
    task_background_id = 3
    task_active_background_id = 2
    task_urgent_background_id = 4
    task_iconified_background_id = 3
    # Task Icons
    task_icon_asb = 80 0 0
    task_active_icon_asb = 100 0 0
    task_urgent_icon_asb = 100 0 0
    task_iconified_icon_asb = 80 0 0
    # Fonts
    task_font = BankGothic Md BT 10
    task_font_color = #696969 60
    task_active_font_color = #696969 100
    task_urgent_font_color = #696969 100
    task_iconified_font_color = #696969 60
    font_shadow = 0
    # Launcher
    launcher_icon_theme = elementary
    launcher_padding = 2 2
    launcher_background_id = 1
    launcher_icon_size = 20
    # Specify icon theme names with launcher_icon_theme.
    # if you have an XSETTINGS manager running (like xfsettingsd), tint2 will follow your current theme.
    #launcher_icon_theme = AwOkenWhite
    # Each launcher_item_app must be a full path to a .desktop file
    launcher_item_app = /usr/share/applications/chromium.desktop
    launcher_item_app = /usr/share/applications/gparted.desktop
    # Clock
    time1_timezone = :/usr/share/zoneinfo/dir/Canada/Eastern
    time1_format = %I:%M %p
    time1_font = BankGothic Md BT 9
    #time2_format = %A, %B %d
    #time2_font = Ubuntu-L 7
    clock_font_color = #ffffff 80
    clock_padding = 5 0
    clock_background_id = 5
    clock_lclick_command = gsimplecal
    #lock_rclick_command =
    # System Tray
    systray = 1
    systray_padding = 2
    systray_sort = right2left
    systray_background_id = 5
    systray_icon_size = 20
    systray_icon_asb = 100 0 0
    # Tooltips
    tooltip = 0
    tooltip_padding = 2 2
    tooltip_show_timeout = 0.0
    tooltip_hide_timeout = 0.0
    tooltip_background_id = 7
    tooltip_font_color = #ff0000 100
    tooltip_font = Roboto-Thin normal 9.0
    # Mouse
    mouse_middle = none
    mouse_right = toggle
    mouse_scroll_up = toggle
    mouse_scroll_down = iconify
    # Battery
    battery = 1
    battery_hide = never
    battery_low_status = 10
    battery_low_cmd = notify-send "battery low"
    bat1_font = sans 8
    bat2_font = sans 6
    battery_font_color = #ffffff 80
    battery_padding = 5 0
    battery_background_id = 5
    # End of config
    Last edited by jolejo07 (2013-07-05 01:39:25)

    I've try but can't get it working ether, i've download from Aur but when i'm trying to use the PKGBUILD with makepkg
    it telling me
    ==> ERROR: Cannot find the fakeroot binary required for building as non-root user.
    ==> ERROR: Cannot find the strip binary required for object file stripping.
    Last edited by jolejo07 (2013-07-05 01:45:21)

  • I have 2 itunes accounts - one work a/c and one home a/c, but when i sign in at home only my home songs appear even if I sign in my work a/c. I have authorised both computers to show both a/cs. How can I get my work a/c songs to appear at home?

    I have 2 itunes a/cs one at work and one at home. Both computers are authorised for the 2 a/cs, but I can;t get my work a/c songs to show on my home computer, even though I sign in my work a/c, and I can't get my home songs to show up on the  work computer even though I sign in my home a/c. V. frustrating!

    Hi,
    You will have to manually copy your music. Get a pen-drive big enough to accommodate all your music. And follow these steps:
    1. Create a new folder on the pen-drive.
    2. Copy the music from your work computer to the folder you just created. It's in (yourhomefolder)>Music>iTunes>iTunes Media>Music if you're using a Mac, or in C:\Users\(yourusername)\Music\iTunes\iTunes Media\Music if you're using Windows.
    3. Now on your home computer quit iTunes, and copy your music from work to the "Automatically Add to iTunes" folder in (yourhomefolder)>Music>iTunes>iTunes Media.
    4. Start iTunes. It will automatically start to process the files and move them to the appropriate place.
    Repeat these steps with your music from home on your work computer. Also I suggest to use only one iTunes account if possible.
    Hope it helps
    Regards,
    Gábor

  • How can we get ADFSecurity work when used in OC4J, OID and OAM?

    I am getting error in http server log "mod_oc4j: Response status=499 and reason=Oracle SSO, but failed to get mod_osso global context."
    But I am not using Oracle SSO and my client doesn't want to use it either, I am using OAM SSO(CoreIDSSO) in my configuration. Please read the details below.
    I am using ADFSecurity in an app that is protected by OAM. To migrate ADFSecurity permissions from
    system-jazn-data.xml to OID, I used JAZNMigrationTool to populate OID with Grantees and Permissions. OAM gives login page, and authentication works fine.
    But ADFSecurity is not working. ADFComponent Delete button is enabled even for roles that dont have permissions for the iterator delete.
    - The app works fine when I use without OAM. ADF Security permissions work fine.
    - The app works fine when used with OAM, but with ADFSecurity disabled (enforce=false).
    - When I enforce ADFSecurity alongwith OAM, ADFSecurity is not working.
    In the doc "Oracle Containers for J2EE Security Guide b28957", there is a mention of use of CoreIDPrincipal for permissions. Our OID Permissions entries show
    LDAPRealmRole for attribute orcljaznprincipal. I am not sure if this could be the reason.
    We have configured AccessServerSDK for the SOA instance and have policy for the urls in the policy manager. We have entries in orion-application.xml, orion-web.xml and system-jazn-data.xml as per the documentations.
    How can we get ADFSecurity work when used with OID and OAM?

    Have you been able to successfully integrate OAS with OAM & OID? We have similar requriement and so far we have not been able to get it working.
    We have application specific roles which we map to OID roles using orion-application.xml.
    Any pointers to achieve this would be greatly appreciated.
    thanks,
    Dipal

  • In disk utility, it shows that my external hard drive is somehow unmounted and I can't access it in finder or repair it in Disk Utility. How can I get this working without losing my important data?

    In disk utility, it shows that my external hard drive is somehow unmounted and I can't access it in finder or repair it in Disk Utility. How can I get this working without losing my important data?
    Thank you!

    When you erased the disk did you select Mac OS Extended Journaled as the format option?

  • My hard drive crashed on my Imac 24" 2009, i put in a new hard drive 2TB and a SSD drive 240 GB and removed the opticdrive. What external DVD can I get to work with the IMac? The Apple super drive is not compatible.

    My hard drive crashed on my Imac 24" 2009,  I installed a new hard drive 2TB and a SSD drive 240 GB and removed the optical drive.
    What external DVD can I get to work with the IMac?                              The Apple super drive is not compatible.

    Virtually any DVD burner that can connect to your Mac will work. They start at $40 on Amazon.

  • Hello, I use MAC AIR OSX 10.6.8 and have Adobe CS2, that I was using 2 years ago on my older computer. I stopped using it because it would close down in the middle of work. Now I would like to reinstall it on the MacAir but I can not get it working. It te

    Hello, I use MAC AIR OSX 10.6.8 and have Adobe CS2, that I was using 2 years ago on my older computer. I stopped using it because it would close down in the middle of work. Now I would like to reinstall it on the MacAir but I can not get it working. It tells Adobe doesnT support my System. But I can not update my old version or activate it. What can I do?

    The mac you want to install photoshop cs2 on is running mac os x 10.6.8 Snow Leopard?
    (photoshop cs2 won't run on intel macs with mac os x newer than snow leopard)
    Did you ever have cs2 installed on this particular computer before?
    If the problem is that you already installed cs2, but it won't activate, that's because adobe took the activation servers offline for some older adobe products such as cs2.
    You'll need to use the non activation version of cs2 from here and the supplied serial number:
    Activation server shut down for Creative Suite 2, Acrobat 7, and Macromedia products

  • Can't get my work email to load on my new phone

    I can't get my work email onto my Droid X.   Anyone know the trick? 

    Carl3 wrote:
    I can't get my work email onto my Droid X.   Anyone know the trick? 
    First quesiton I have is do you have authorization to access your work email from your Droid X? Just knowing the email address and password is enough for you to get your personal email, but your employer must approve remote access.
    If it's okay with your employer, you may also need to know the incoming and outgoing email server addresses, the port number, and your username on your employer's email server. If you're not sure what they are, check with your IT admin AFTER you get confirmation that it's okay to get your email.

Maybe you are looking for