FreeBSD8.0+postfix+sasl2+mysql+maildrop+ExtMan+Mailman+ClamAv完全安装

zonyonq

辛苦了!

lastfile

这段时间也在乱搞postfix中，不过在debian下

Intranet

有人根据这个文档配置成功过吗？
我两次配置都碰到同样的问题：

1. 
   
2. mail# apachectl start
   
3. Syntax error on line 30 of /usr/local/etc/apache22/Includes/extmail-ssl.conf:
   
4. SSLCertificateFile: file '/usr/local/etc/apache22/certs/mycert.pem' does not exist or is empty
   
5. mail#
   
6. 
   

复制代码

1. 
   
2. mail# cat httpd-error.log
   
3. [Wed Jun 30 17:29:54 2010] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
   
4. [Wed Jun 30 17:29:54 2010] [notice] suEXEC mechanism enabled (wrapper: /usr/local/sbin/suexec)
   
5. [Wed Jun 30 17:29:55 2010] [notice] Digest: generating secret for digest authentication ...
   
6. [Wed Jun 30 17:29:55 2010] [notice] Digest: done
   
7. [Wed Jun 30 17:29:56 2010] [notice] Apache/2.2.15 (FreeBSD) mod_ssl/2.2.15 OpenSSL/1.0.0a DAV/2 configured -- resuming normal operations
   
8. [Wed Jun 30 17:49:45 2010] [error] [client 192.168.1.18] File does not exist: /usr/local/www/extmail
   
9. [Wed Jun 30 17:49:55 2010] [error] [client 192.168.1.18] File does not exist: /usr/local/www/extmail
   
10. [Wed Jun 30 18:03:29 2010] [error] [client 192.168.1.18] Prototype mismatch: sub Encode::IMAPUTF7::decode ($$;$) vs none at /usr/local/www/extman/libs/Encode/IMAPUTF7.pm line 76.
    
11. [Thu Jul 01 10:35:17 2010] [notice] SIGHUP received.  Attempting to restart
    
12. Syntax error on line 30 of /usr/local/etc/apache22/Includes/extmail-ssl.conf:
    
13. SSLCertificateFile: file '/usr/local/etc/apache22/certs/mycert.pem' does not exist or is empty
    
14. mail#
    
15. 
    

复制代码

1. 
   
2. mail# cat /usr/local/etc/apache22/Includes/extmail-ssl.conf
   
3. 
   
4. Listen 443
   
5. 
   
6. AddType application/x-x509-ca-cert .crt
   
7. AddType application/x-pkcs7-crl    .crl
   
8. 
   
9. SSLPassPhraseDialog  builtin
   
10. SSLSessionCache        shmcb:/var/run/ssl_scache(512000)
    
11. SSLSessionCacheTimeout  300
    
12. SSLMutex  file:/var/run/ssl_mutex
    
13. 
    
14. <VirtualHost _default_:443>
    
15. 
    
16. DocumentRoot "/usr/local/www/extmail/html"
    
17. ServerName mail.gnulabs.net:443
    
18. 
    
19. ScriptAlias /extmail/cgi /usr/local/www/extmail/cgi/
    
20. Alias /extmail /usr/local/www/extmail/html/
    
21. ScriptAlias /extman/cgi "/usr/local/www/extman/cgi/"
    
22. Alias /extman "/usr/local/www/extman/html/"
    
23. 
    
24. ServerAdmin [email]88096111@qq.com[/email]
    
25. ErrorLog /var/log/httpd-error.log
    
26. TransferLog /var/log/httpd-access.log
    
27. SSLEngine on
    
28. SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    
29. #SSLCertificateFile /usr/local/etc/apache22/server.crt
    
30. #SSLCertificateKeyFile /usr/local/etc/apache22/server.key
    
31. 
    
32. SSLCertificateFile /usr/local/etc/apache22/certs/mycert.pem
    
33. SSLCertificateKeyFile /usr/local/etc/apache22/certs/mykey.pem
    
34. 
    
35. <FilesMatch "\.(cgi|shtml|phtml|php)$">
    
36.     SSLOptions +StdEnvVars
    
37. </FilesMatch>
    
38. <Directory "/usr/local/www/apache22/cgi-bin">
    
39.     SSLOptions +StdEnvVars
    
40. </Directory>
    
41. BrowserMatch ".*MSIE.*" \
    
42.          nokeepalive ssl-unclean-shutdown \
    
43.          downgrade-1.0 force-response-1.0
    
44. CustomLog /var/log/httpd-ssl_request.log \
    
45.           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
    
46. 
    
47. #SuexecUserGroup vmail vmail
    
48. </VirtualHost>
    
49. 
    
50. # //....,..HTTPS...........
    
51. <Location "/extman/cgi">
    
52.         SetHandler cgi-script
    
53.         Options +ExecCGI
    
54. #      AllowOverride All
    
55.     </Location>
    
56.     <Directory "/usr/local/www">
    
57.         AllowOverride None
    
58.         Options None
    
59.         Order allow,deny
    
60.         Allow from all
    
61.     </Directory>
    
62. mail#
    

复制代码

1. 
   
2. mail# ls -l /usr/local/etc/apache22/certs
   
3. total 4
   
4. -rwxr-xr-x  1 root  wheel  1058 Jun 30 17:51 cacert.pem
   
5. -rw-r--r--  1 root  wheel     0 Jun 30 17:51 mycert.pem
   
6. -r--r-----  1 root  wheel   887 Jun 30 17:51 mykey.pem
   
7. mail#
   

复制代码

Intranet

有人根据这个文档配置成功过吗？
我两次配置都碰到同样的问题：
Intranet 发表于 2010-07-01 11:15

    不知道怎么解决啊。。。。

kecai_cale

奇怪了，无法启动Apache

Performing sanity check on apache22 configuration:
Syntax error on line 29 of /usr/local/etc/apache22/Includes/extmail-ssl.conf:
SSLCertificateFile: file '/usr/local/etc/apache22/certs/mycert.pem' does not exist or is empty

kecai_cale

[i=s] 本帖最后由 kecai_cale 于 2010-07-08 22:44 编辑 [/i]

tendwin# openssl ca -config openssl.cnf -policy policy_anything -out mycert.pem -infiles tmp.pem
Using configuration from openssl.cnf
Enter pass phrase for /usr/local/etc/postfix/certs/CA/private/cakey.pem:（我输入的管理员密码）
unable to load CA private key
19165:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/evp/evp_enc.c:330:
19165:error:0906A065:PEM routines:PEM_do_header:bad decrypt:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/pem/pem_lib.c:428:
tendwin# 19165:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:/usr/src/secure/lib/libcrypto/../../../crypto/openssl/crypto/evp/evp_enc.c:330:
19165:error:06065064:digital: Command not found.

huoyun

tendwin# openssl ca -config openssl.cnf -policy policy_anything -out mycert.pem -infiles tmp.pem
Us ...
kecai_cale 发表于 2010-07-08 22:01

密码错误，应该输入刚刚设置的私钥密码。

huoyun

解决方法：
在CA目录下执行“echo "unique_subject = no" > index.txt.attr  ”，生成index.txt.attr就好了 ...
Intranet 发表于 2010-06-22 15:22

这样可以得到mycert.pem,但只是个空文件啊
-rw-r--r--  1 root  wheel     0 Oct 18 18:04 mycert.pem

huoyun

解决方法：
在CA目录下执行“echo "unique_subject = no" > index.txt.attr  ”，生成index.txt.attr就好了 ...
Intranet 发表于 2010-06-22 15:22

       

朋友，这样生成的mycert.pem文件时空的啊。后面配置apache的ssl时也会报错。



mail# /usr/local/sbin/apachectl -t

Warning: DocumentRoot [/usr/local/www/extmail/html] does not exist

Syntax error on line 29 of /usr/local/etc/apache22/Includes/extmail-ssl.conf:

SSLCertificateFile: file '/usr/local/etc/apache22/certs/mycert.pem' does not exist or is empty

huoyun

奇怪了，无法启动Apache

Performing sanity check on apache22 configuration:
Syntax error on line 2 ...
kecai_cale 发表于 2010-07-08 17:55

就是空文件的问题。高手解决一下不