5 messages in net.sourceforge.lists.courier-usersRe: [courier-users] ssl certificate u...| From | Sent On | Attachments |
|---|---|---|
| Marco Kammerer | Apr 9, 2008 5:25 pm | |
| Sam Varshavchik | Apr 9, 2008 6:31 pm | |
| Marco Kammerer | Apr 24, 2008 4:51 pm | |
| Gordon Messmer | Apr 24, 2008 5:14 pm | |
| Marco Kammerer | May 29, 2008 4:59 am |
| Subject: | Re: [courier-users] ssl certificate usage | |
|---|---|---|
| From: | Marco Kammerer (marc...@uibk.ac.at) | |
| Date: | Apr 24, 2008 4:51:40 pm | |
| List: | net.sourceforge.lists.courier-users | |
Sam wrote
I bought a certificate that is already working with apache22.
Additional I want to get rid of the warning message in emailsclients that the ssl cert is not good ...
is it possible to use the same ssl certs as i use with apache?
the dir with the ssl look like that -rw-r--r-- 1 root root 4603 2008-03-18 22:39 gd_intermediate_bundle.crt -rw-r--r-- 1 root root 1814 2008-03-18 22:42 mymachine.crt -rw-r--r-- 1 root root 887 2008-03-18 21:32 myserver.key -rw-r--r-- 1 root root 794 2008-03-18 21:32 server.csr
Run openssl x509 -inform der -outform pem -in myserver.key -out myserver.pem
Then, repeat the same command for mymachine.crt, and gt_intermediate_bundle.crt.
Then, take the resulting three .pem files, and concatenate them together. I do not recall offhand the correct order, but I believe it should be: your key, your pem, the intermediate pem. Take the resulting single file, and specify it as TLS_CERTFILE.
the command does not work out
openssl x509 -inform der -outform pem -in myserver.key -out myserver.pem unable to load certificate 6266:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1296: 6266:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509
or
openssl x509 -inform der -outform pem -in gd_intermediate_bundle.crt -out gd_intermediate_bundle.pem unable to load certificate 6267:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1296: 6267:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509
Any ideas?
Marco