Cyrus TLS connection problem

Hi all,

On imaps connection from my Outlook to cyrus2.2.13 autocreate patched, i got this error :
cyrus/master[2619]: about to exec /usr/lib/cyrus/bin/imapd
cyrus/imaps[2619]: executed
cyrus/imaps[2619]: accepted connection
cyrus/imaps[2619]: unable to get private key from '/etc/ssl/private/ssl-cert-cyrus.key’
cyrus/imaps[2619]: TLS server engine: cannot load cert/key data, may be a cert/key mismatch?
cyrus/imaps[2619]: error initializing TLS
cyrus/imaps[2619]: Fatal error: tls_init() failed
cyrus/imaps[2619]: DBERROR db4: Database handles open during environment close
cyrus/imaps[2619]: DBERROR: error exiting application: Invalid argument
cyrus/master[2283]: process 2619 exited, status 75
cyrus/master[2283]: service imaps pid 2619 in BUSY state: terminated abnormally

Can’t, of course, connect to my imap box. Connections are OK if i comment tls_cert_* but i need to use encryption.

smtps work properly with my postfix2.3.8 under TLS with same pem/key/ca files.

My imapd.conf :

File containing the global certificate used for ALL services tls_cert_file: /etc/ssl/certs/ssl-cert-cyrus.pem

File containing the private key belonging to the global server certificate.

tls_key_file: /etc/ssl/private/ssl-cert-cyrus.key

File containing one or more Certificate Authority (CA) certificates.

tls_ca_file: /etc/ssl/certs/cyrus-ca.pem

Path to directory with certificates of CAs.

tls_ca_path: /etc/ssl/certs

Thanks for any help.

Regards,

Hi,
i have no idea of the cyrus stuff, but …
maybe imapd.conf is not correct regarding certs, you may have a look to 7.1.4’s paragraph of this document ?

ps: you don’t even speak a word of french ? :smiley:

Hé Hé, je suis français pure souche.

IMTEST passe bien le TLS !!! incroyable, je pige kdale à cette affaire moi :slightly_smiling:

srv-groupware:~# imtest -t “” localhost
S: * OK srv-groupware Cyrus IMAP4 v2.2.13-Debian-2.2.13-10 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE IDLE STARTTLS
S: C01 OK Completed
C: S01 STARTTLS
S: S01 NO Error initializing TLS
Please enter your password:
C: L01 LOGIN root {6}
S: + go ahead
C:
S: L01 OK User logged in
Authenticated.
Security strength factor: 0
C: Q01 LOGOUT
Connection closed.
srv-groupware:~#