I've gotten myself in a bit of a pickle.  Due to administrative problems
with my company's NIC records and subsequent delay of several weeks in
getting a signed certificate back from Equifax, I've so far been unable
to find the correct private key for the certificate.  I am trying to use
the certificate with IMAP to replace our old POP3 server with an IMAP
over TLS/SSL server.

Setup is:
RedHat 7.3
Linux 2.4.18-3
OpenSSL 0.9.6g
IMAP4rev1 2002.328 ( Washington U IMAP server 2002.RC7 )

I've found what I believe to be the correct key file ( based on date,
location ), however it appears to be encrypted with a password.
The imap daemon starts fine ( using xinet ) but when I try to connect,
I get timeout waiting for the server to respond to the Client Hello.

After killing the imap server I get the following in my maillogs:
Nov 26 13:43:38 prospero imapd[16265]: Unable to load private key from
/usr/local/ssl/certs/imapd.pem, host=UNKNOWN
Nov 26 13:43:38 prospero imapd[16265]: SSL error status: error:0906406D:PEM
routines:DEF_CALLBACK:problems getting password
Nov 26 13:43:38 prospero imapd[16265]: SSL error status: error:0906A068:PEM
routines:PEM_do_header:bad password read
Nov 26 13:43:38 prospero imapd[16265]: SSL error status: error:140B3009:SSL
routines:SSL_CTX_use_RSAPrivateKey_file:missing asn1 e
os

Is there a simple way to remove the password from my key file?
Is that even my problem?  I'm fairly new to OpenSSL so help of
any kind is appreciated.

Thanks,

Paul Ogden
Claresco Corporation
(510) 549-2290

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to