[postfix-jp: 4356] Re: SMTP oer SSL/TLSができない。

[渡辺]

野村さん

　ありがとうございます。

　渡辺です。

変えてみましたが、変わりないようです。
---------------------------------------------------------------------------
# chmod 744 /etc/pki/dovecot/certs/dovecot.pem
# chmod 600 /etc/pki/dovecot/private/dovecot.pem
# ls -la /etc/pki/dovecot/certs/dovecot.pem
-rwxr--r--. 1 root root 1025 Mar 28 07:12 /etc/pki/dovecot/certs/dovecot.pem
# ls -la /etc/pki/dovecot/private/dovecot.pem
-rw-------. 1 root root 916 Mar 28 07:12 /etc/pki/dovecot/private/dovecot.pem


# openssl s_client -connect localhost:465
CONNECTED(00000003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 247 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

  systemctl status -l postfix
● postfix.service - Postfix Mail Transport Agent
    Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset: disabled)
    Active: active (running) since Mon 2016-03-28 07:33:37 JST; 2h 23min ago
   Process: 30662 ExecStop=/usr/sbin/postfix stop (code=exited, status=0/SUCCESS)
   Process: 30679 ExecStart=/usr/sbin/postfix start (code=exited, status=0/SUCCESS)
   Process: 30675 ExecStartPre=/usr/libexec/postfix/chroot-update (code=exited, status=0/SUCCESS)
   Process: 30672 ExecStartPre=/usr/libexec/postfix/aliasesdb (code=exited, status=0/SUCCESS)
  Main PID: 30751 (master)
    CGroup: /system.slice/postfix.service
            tq30751 /usr/libexec/postfix/master -w
            tq30753 qmgr -l -t unix -u
            tq30759 tlsmgr -l -t unix -u
            tq31143 pickup -l -t unix -u
            tq31251 smtpd -n smtps -t inet -u -o stress= -o syslog_name=postfix/smtps -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_reject_unlisted_recipient=no -o smtpd_client_restrictions=$mua_client_restrictions -o smtpd_helo_restrictions=$mua_helo_restrictions -o smtpd_sender_restrictions=$mua_sender_restrictions -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
            mq31252 proxymap -t unix -u

postfix/smtps/smtpd[30954]: connect from localhost[127.0.0.1]
postfix/smtps/smtpd[30954]: warning: Wrapper-mode request dropped from localhost[127.0.0.1] for service smtps. TLS context initialization failed. For details see earlier warnings in your logs.
postfix/smtps/smtpd[30954]: disconnect from localhost[127.0.0.1]
postfix/smtps/smtpd[31251]: warning: cannot get RSA certificate from file /etc/pki/dovecot/certs/dovecot.pem: disabling TLS support
postfix/smtps/smtpd[31251]: warning: TLS library problem: 31251:error:0200100D:system library:fopen:Permission denied:bss_file.c:398:fopen('/etc/pki/dovecot/certs/dovecot.pem','r'):
postfix/smtps/smtpd[31251]: warning: TLS library problem: 31251:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400:
postfix/smtps/smtpd[31251]: warning: TLS library problem: 31251:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:722:
postfix/smtps/smtpd[31251]: connect from localhost[127.0.0.1]
postfix/smtps/smtpd[31251]: warning: Wrapper-mode request dropped from localhost[127.0.0.1] for service smtps. TLS context initialization failed. For details see earlier warnings in your logs.
postfix/smtps/smtpd[31251]: disconnect from localhost[127.0.0.1]

--
/////ﾉﾍﾞﾙｯﾄ///////////////////////////////////////////////
　株式会社　ノベルット　ソフトウェア　インダストリー
　　代表取締役　渡辺 伸雄
　〒144-0043　東京都 大田区 羽田２－１２－３
　Tel:[phone]
　Fax:[phone] ＦＡＸ番号が変わりました！
　mobile-phone:[phone]
   Email:[hidden email]
///////////////////////////////////////////////ﾉﾍﾞﾙｯﾄ/////

_______________________________________________
Postfix-jp-list mailing list
[hidden email]
http://lists.osdn.me/mailman/listinfo/postfix-jp-list