Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I trying to setup a mail server on my server, I followed the following instructions:

https://help.ubuntu.com/10.04/serverguide/C/certificates-and-security.html
https://help.ubuntu.com/10.04/serverguide/C/postfix.html

but in the system log I am sill getting the following error:

Sep 25 14:00:38 tanko-20590 dovecot: managesieve-login: Fatal: Can't load certificate file /etc/ssl/certs/ssl-mail.pem: The file doesn't contain a cer$
Sep 25 14:00:38 tanko-20590 dovecot: pop3-login: Fatal: Can't load certificate file /etc/ssl/certs/ssl-mail.pem: The file doesn't contain a certificat$
Sep 25 14:00:38 tanko-20590 dovecot: pop3-login: Fatal: Can't load certificate file /etc/ssl/certs/ssl-mail.pem: The file doesn't contain a certificat$
Sep 25 14:00:38 tanko-20590 dovecot: imap-login: Fatal: Can't load certificate file /etc/ssl/certs/ssl-mail.pem:
share|improve this question
1  
Isn't the message clear? There is no certificate in the file /etc/ssl/certs/ssl-mail.pem. –  mailq Sep 25 '11 at 12:13
    
It's clear but how can I create one? Sorry id this is a stupid question but i'm not a server administrator. –  run Sep 25 '11 at 12:18
    
possible duplicate of How do I setup a SSL mail server? –  mailq Sep 25 '11 at 12:30
add comment

2 Answers

up vote 2 down vote accepted

I used tinyca2 to create my certificates. It is available as a package. In Ubuntu you may want to add dovecot to the ssl-cert group. This will allow it to read certificates from the standard directories. Try using the following command.

adduser dovecot ssl-cert

You will also want to ensure the ssl-cert group can read the key for the certificate.

chgrp ssl-cert /etc/ssl/cert/ssl-mail-key.pem 

Normally your certificate goes in /etc/ssl/certs and the key in /etc/ssl/private.

share|improve this answer
    
Thanks for your help. –  run Sep 25 '11 at 19:45
add comment

The creation and configuration of certificates for Dovecot is documented in the Wiki.

If you followed the instructions and it still does not work then we need way more information than "it does not work".

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.