Re: [exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Viktor Dukhovni via Exim-users
On Mon, Feb 27, 2023 at 10:21:56AM +, Gary Stainburn via Exim-users wrote: >   generated-private-key.txt > >   inflating: 27eff7f9e735cb3f.crt >   inflating: 27eff7f9e735cb3f.pem > The exim.conf file includes > >   tls_privatekey  = /etc/pki/tls/certs/ringways.co.uk.key >   tls_certifi

Re: [exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Heiko Schlittermann via Exim-users
Gary Stainburn via Exim-users (Mo 27 Feb 2023 11:21:56 CET): > > However, when I install the new files I get SSL errors. > > TLS error on connection from mail14.atl281.mcsv.net [198.2.143.14] > (SSL_CTX_use_PrivateKey_file file=/etc/pki/tls/certs/ringways.co.uk.key): > error:0906D06C:PEM routin

Re: [exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Jeremy Harris via Exim-users
On 27/02/2023 11:15, Gary Stainburn via Exim-users wrote: I did suspect this, but the private key is in the correct format. Try running Exim with debug; does it give any further hint? Check the file ownership & permissions, also. -- Cheers, Jeremy -- ## List details at https://lists.exim.o

Re: [exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Gary Stainburn via Exim-users
Hi Jeremy, I did suspect this, but the private key is in the correct format. -BEGIN PRIVATE KEY- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCfHGSy2Xa86a6u [24 extra lines] teQhR4s9S0uGkQ5UJMz51JY= -END PRIVATE KEY- Also, Carrying out the same process for the Apache server

Re: [exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Jeremy Harris via Exim-users
On 27/02/2023 10:21, Gary Stainburn via Exim-users wrote: TLS error on connection from mail14.atl281.mcsv.net [198.2.143.14] (SSL_CTX_use_PrivateKey_file file=/etc/pki/tls/certs/ringways.co.uk.key): error:0906D06C:PEM routines:PEM_read_bio:no start line I seem to remember in the past that I h

[exim] renewing the SSL certificate doesn't work

2023-02-27 Thread Gary Stainburn via Exim-users
Hello everyone. I've just purchased a new SSL certificate as my previous one expired last night.  As I got a new SHA-2 certificate, it came with a new private key and a new bundle. The files that were generated were:   generated-csr.txt   generated-private-key.txt The files I received are: