Multidomain / IP Address Setup (Dovevot 2.2.10 on CentOS7 ) is failing: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM

Christian Kivalo ml+dovecot at valo.at
Sat Aug 15 06:16:00 UTC 2015



>I think you should post doveconf -n output.

with your dovecot -n output provided this mail would not need to be sent

>On 08/14/15 20:30, dravion.smith at gmx.net wrote:
>>
>> ### CORRECTION
>> Am 15.08.2015 um 03:22 schrieb dravion.smith at gmx.net:
>>>
>>> #### BUT ####
>>> If i try something like this in /etc/dovecot/conf.d/10-ssl.conf
>>>
>>> local imap.mydomain01.tld {
>>> protocol imap {
>>> ssl_cert = 
>>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.crt.pem
>>> ssl_key  = 
>>> </etc/ssl/domains/mydomain01.tld/imap/imap.mydomain01.tld.key.pem
>>> }
>>> }
>>>
>>> local imap.mydomain02.tld {
>>> protocol imap {
>>> ssl_cert = 
>>> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.crt.pem
>>> ssl_key  = 
>>> </etc/ssl/domains/mydomain02.tld/imap/imap.mydomain02.tld.key.pem
>>> }
>>> }
>>>
>>> It throws errors like this
>>> "imap-login "parse private ssl_key: error:0906D06C:PEM"
>>> in the logfile /var/maillog
from the dovecot

from the dovecot ssl wiki page http://wiki2.dovecot.org/SSL/DovecotConfiguration 

Multiple SSL certificates
Different certificates per IP and protocol

If you have multiple IPs available, this method is guaranteed to work with all clients.

[snip]

Note that you will still need a top-level "default" ssl_key and ssl_cert as well, or you will receive errors.

in addition to your two domain specific ssl certs have you also defined a "default" ssl_key and ssl_cert as required as required by the documentation?

regards
- c



More information about the dovecot mailing list