Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Dec 2004 19:07:18 +0000
From:      Nick Wilson <nick@wilson.org.uk>
To:        freebsd-questions@freebsd.org
Subject:   Sendmail TLS
Message-ID:  <41D30066.4020808@wilson.org.uk>

next in thread | raw e-mail | index | archive | help
I have tried to set up TLS for Sendmail, as described in chapter 14.9 of 
the handbook.  Having created the certificates in /etc/certs and 
modified the sendmail .mc file, I have the following problem:

With the myca.key file permissions set to readable by root only

-rwx------  1 root  wheel   736 Dec 29 17:11 myca.key

sendmail gives the message

Dec 29 18:57:01 jericho sm-mta[901]: STARTTLS=server, error: 
SSL_CTX_use_PrivateKey_file(/etc/certs/myca.key) failed

if I set the permissions to add group readable, I get

Dec 29 17:27:02 jericho sm-mta[659]: STARTTLS=server: file 
/etc/certs/myca.key unsafe: Group readable file

What owner, group and permissions should I set for myca.key?

Many thanks,

Nick



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41D30066.4020808>