TLS not available

[Juliano Silva]

Hello

How do I solve this error? I'm not getting emails from other providers


Transcript of session follows.

Out: 220 security.iwebhosting.com.br ESMTP Proxmox
In: EHLO mail-qt0-f172.google.com
Out: 250-security.iwebxxxxxxxxx.com.br
Out: 250-PIPELINING
Out: 250-SIZE 10485760
Out: 250-VRFY
Out: 250-ETRN
Out: 250-STARTTLS
Out: 250-ENHANCEDSTATUSCODES
Out: 250-8BITMIME
Out: 250 SMTPUTF8
In: STARTTLS
Out: 454 4.7.0 TLS not available due to local problem

Session aborted, reason: lost connection

For other details, see the local mail logfile

 

[dietmar]

Any hint in /var/log/syslog ?

 

[Juliano Silva]

Any hint in /var/log/syslog ?

Feb 15 06:31:10 security postfix/smtpd[22410]: warning: cannot get RSA private key from file "/etc/pmg/pmg-tls.pem": disabling TLS support
Feb 15 06:31:10 security postfix/smtpd[22410]: warning: TLS library problem: error:0906D06CEM routinesEM_read_bio:no start line:../crypto/pem/pem_lib.c:691:Expecti$
Feb 15 06:31:10 security postfix/smtpd[22410]: warning: TLS library problem: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_fileEM lib:../ssl/ssl_rsa.c:550:
Feb 15 06:31:10 security postfix/smtpd[22410]: connect from mx2.comprasegura.poa.br[98.143.37.229]
Feb 15 06:31:10 security pmgpolicy[17938]: SPF says pass


Feb 15 06:42:31 security postfix/smtpd[23626]: warning: cannot get RSA private key from file "/etc/pmg/pmg-tls.pem": disabling TLS support
Feb 15 06:42:31 security postfix/smtpd[23626]: warning: TLS library problem: error:0906D06CEM routinesEM_read_bio:no start line:../crypto/pem/pem_lib.c:691:Expecti$
Feb 15 06:42:31 security postfix/smtpd[23626]: warning: TLS library problem: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_fileEM lib:../ssl/ssl_rsa.c:550:
Feb 15 06:42:32 security postfix/smtpd[23626]: connect from nempox.emcurso.com.br[69.30.200.91]
Feb 15 06:42:32 security pmgpolicy[17935]: SPF says pass

 

[dietmar]

Feb 15 06:31:10 security postfix/smtpd[22410]: warning: cannot get RSA private key from file "/etc/pmg/pmg-tls.pem": disabling TLS support

So what happened to /etc/pmg/pmg-tls.pem ?

 

[Juliano Silva]

So what happened to /etc/pmg/pmg-tls.pem ?

Yes, I installed letsencrypt
https://forum.proxmox.com/threads/proxmox-mail-gateway-letsencrypt.41101/#post-198153

 

[dietmar]

So obviously something went wrong ...

 

[tom]

Yes, I installed letsencrypt
https://forum.proxmox.com/threads/proxmox-mail-gateway-letsencrypt.41101/#post-198153

this howto is wrong, do not follow this.

 

[Juliano Silva]

this howto is wrong, do not follow this.

How do I install SSL on my PMG? where to buy SSL

 

[tom]

How do I install SSL on my PMG? where to buy SSL

You can use any, also lets encrypt.
See our admin guide and the docs from the SSL provider.

 

[Juliano Silva]

You can use any, also lets encrypt.
See our admin guide and the docs from the SSL provider.

indication for buy? globalsign.com

 

[Juliano Silva]

Hi