TLS library problem

[ivanbrasil]

Hi

My zimbra installation ocurred ok but when i try to send mail outside lan i have this erros and message does not sent.

Nov 12 11:05:22 netserver postfix/smtpd[11898]: warning: cannot get certificate from file /opt/zimbra/conf/smtpd.crt
Nov 12 11:05:22 netserver postfix/smtpd[11898]: warning: TLS library problem: 11898:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:644:Expecting: CERTIFICATE:

[phoenix]

I'd suggest you regenerate your certificates, you should also check your installation logs for any errors.

[ivanbrasil]

I did this steps but the error persist.

[phoenix]

Which steps, exactly, did you do. Were there any errors? What was the output from the regeneration steps? Did you restart Zimbra after regenerating the certificates?

What is in the install log files, any errors? You don't normally get errors like this after an install, have you modified anything? Which operating system and version of Zimbra are you using? At least give us a hint so we have something to work with.

[ivanbrasil]

I using Zimbra 4.5.8 Community and Ubuntu Server 6.06-1

The server has no errors in install log and a altered file /opt/zimbra/conf/zmssl.cnf.in with information about my domain.

The file /opt/zimbra/conf/smtpd.crt is empty.

Below is the output of comands:


zimbra@netserver:~$ zmcreateca
** Creating CA private key

Generating a 1024 bit RSA private key
..............................++++++
...............++++++
unable to write 'random state'
writing new private key to '/opt/zimbra/ssl/ssl/ca/ca.key'
-----
** Creating CA cert

Signature ok
subject=/C=BR/ST=RS/L=Erechim/O=Cyber/OU=Cyber/CN=cyber.inf.br
Getting Private key
unable to write 'random state'


zimbra@netserver:~$ zmcreatecert
** Importing CA

Certificate was added to keystore
** Creating keystore

** Creating server cert request

Generating a 1024 bit RSA private key
..........++++++
...++++++
unable to write 'random state'
writing new private key to '/opt/zimbra/ssl/ssl/server/server.key'
-----
** Signing cert request

Using configuration from /opt/zimbra/ssl/ssl/zmssl.cnf
Check that the request matches the signature
Signature ok
BR:invalid type in 'policy' configuration
unable to write 'random state'
Signature ok
subject=/C=US/ST=NA/L=NA/O=Zimbra/OU=Zimbra/CN=cyber.inf.br
Getting CA Private Key
unable to write 'random state'


zimbra@netserver:~$ zmcreatecert cyber.inf.br
** Importing CA

Certificate was added to keystore
** Creating keystore

** Creating server cert request

Generating a 1024 bit RSA private key
....++++++
...........................++++++
unable to write 'random state'
writing new private key to '/opt/zimbra/ssl/ssl/server/server.key'
-----
** Signing cert request

Using configuration from /opt/zimbra/ssl/ssl/zmssl.cnf
Check that the request matches the signature
Signature ok
BR:invalid type in 'policy' configuration
unable to write 'random state'
Signature ok
subject=/C=US/ST=NA/L=NA/O=Zimbra/OU=Zimbra/CN=cyber.inf.br
Getting CA Private Key
unable to write 'random state'


zimbra@netserver:~$ zmcertinstall mailbox /opt/zimbra/ssl/ssl/server/tomcat.crt
** Importing server cert

Certificate reply was installed in keystore


zimbra@netserver:~$ zmcertinstall mta /opt/zimbra/ssl/ssl/server/server.crt /opt/zimbra/ssl/ssl/server/server.key
** Importing server cert


zimbra@netserver:~$ zmprov -l gcf zimbraCertAuthorityKeySelfSigned
zimbraCertAuthorityKeySelfSigned: -----BEGIN RSA PRIVATE KEY-----
MIICXAIBAAKBgQCwlVq+nFVb1RhQYDDgskyc0+sGbbOJGe2a5O onJG212lz/LNg1
bwPZQoP47MlyrqVbC8WWjzpeNMEC7ZhlaE3qwVSIk1CGmj0gLf 3vTkK2XlsxVwoo
h5eEHyaeiJO2bpc855v6060r+TqTq4LnP+qtxqS9XwlcgfhYT4 S68Mk2BQIDAQAB
AoGBAJds/IxIc8p0So1ib4fAXoJ+GCVDHZqMaX1SoJlAW/R+dRE924q20I4WxCVK
qNV3fsU8qwwZduwiQQHJzc3oTCd+tJ9mg6tREYDRpjAl7J/o/sbATCGduAvZajlk
q4DiiLjbDq8HLwk3ZnymPs+P7v21ywH0tl40eke48KfxlT9hAk EA4QhFywGzZuHS
KKatX3RUGeJ9a/GxexZpMe9anfhpYO2xDcqX2oDVhoNhikssv8ThmDPhM7EQKf4r
zgjtC435gwJBAMjiQwXz2/YdBJ0fkSyEFwbtm4sYmiIkktklQCGu/YwkhSo1oIhJ
c9Ov7PFRbfrHdjsn1TXWqc12M2o7ezyFY9cCQEh18HtZFdqoFp MOcL9O5xHas4ZB
smOvKLpyl1xMtCoI/70wIkuyto702UC9yjAKBpaLBhYuCsVq2dIjX6kb018CQQCN
P1LDH7l9LuAsnqKUO3h5fZ7NygmukirTFjcmuAU9gfxENpre2U 7g/KVM9OWw3IkM
hTCMf5i7iC4Utygq4NvXAj8WLZuM3+X2O67sRB9OoPg3jvmgxL 4GPP9bWqwEGRjg
uldREz18n9apnZvlb4ZB4OhpnwI9HZ2DPmcCyFlZdYc=
-----END RSA PRIVATE KEY-----


zimbra@netserver:~$ zmprov -l gcf zimbraCertAuthorityCertSelfSigned
zimbraCertAuthorityCertSelfSigned: -----BEGIN TRUSTED CERTIFICATE-----
MIICPTCCAaYCCQDy1FHYnJEDmTANBgkqhkiG9w0BAQUFADBjMQ swCQYDVQQGEwJC
UjELMAkGA1UECBMCUlMxEDAOBgNVBAcTB0VyZWNoaW0xDjAMBg NVBAoTBUN5YmVy
MQ4wDAYDVQQLEwVDeWJlcjEVMBMGA1UEAxMMY3liZXIuaW5mLm JyMB4XDTA3MTEx
MjE2MDAyNFoXDTA4MTExMTE2MDAyNFowYzELMAkGA1UEBhMCQl IxCzAJBgNVBAgT
AlJTMRAwDgYDVQQHEwdFcmVjaGltMQ4wDAYDVQQKEwVDeWJlcj EOMAwGA1UECxMF
Q3liZXIxFTATBgNVBAMTDGN5YmVyLmluZi5icjCBnzANBgkqhk iG9w0BAQEFAAOB
jQAwgYkCgYEAsJVavpxVW9UYUGAw4LJMnNPrBm2ziRntmuTqJy Rttdpc/yzYNW8D
2UKD+OzJcq6lWwvFlo86XjTBAu2YZWhN6sFUiJNQhpo9IC3970 5Ctl5bMVcKKIeX
hB8mnoiTtm6XPOeb+tOtK/k6k6uC5z/qrcakvV8JXIH4WE+EuvDJNgUCAwEAATAN
BgkqhkiG9w0BAQUFAAOBgQAxacCY0ce4ZqjEO7MiRwxO6aKhUw xYB8pa2o/Ttckp
In9foK6YUhtvs/p81IC0TCsOsPMTiSjBzuHe5QG28W+4GBCS24xissVYociGAHOS
PFugO4vhMUi5+h+h4tBjge6BLHVjXrYtQCsJ+ORXBbSdse+JmY l0CyVmnvLbDKyc
zw==
-----END TRUSTED CERTIFICATE-----


zimbra@netserver:~$ zmcontrol stop
Host cyber.inf.br
Stopping stats...Done
Stopping mta...Done
Stopping spell...Done
Stopping snmp...Done
Stopping antivirus...Done
Stopping antispam...Done
Stopping imapproxy...Done
Stopping mailbox...Done
Stopping logger...Done
Stopping ldap...Done
zimbra@netserver:~$ zmcontrol start
Host cyber.inf.br
Starting ldap...Done.
Starting logger...Done.
Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...Done.
Starting snmp...Done.
Starting mta...Done.
Starting stats...Done.