ispCP - Board - Support
Postfix: fatal: No server certs available. TLS can't be enabled - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: System Setup & Installation (/forum-32.html)
+--- Thread: Postfix: fatal: No server certs available. TLS can't be enabled (/thread-3583.html)

Postfix: fatal: No server certs available. TLS can't be enabled - Solvik - 06-21-2008 06:50 PM

Hello everybody !

In my mail.log, i have some errors:

Quote:Jun 21 10:38:20 creativgaming postfix/smtpd[25312]: fatal: No server certs available. TLS can't be enabled
Jun 21 10:38:21 creativgaming postfix/master[5569]: warning: process /usr/lib/postfix/smtpd pid 25312 exit status 1
Jun 21 10:38:21 creativgaming postfix/master[5569]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling
Jun 21 10:39:21 creativgaming postfix/smtpd[28920]: fatal: No server certs available. TLS can't be enabled
Jun 21 10:39:22 creativgaming postfix/master[5569]: warning: process /usr/lib/postfix/smtpd pid 28920 exit status 1
Jun 21 10:39:22 creativgaming postfix/master[5569]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling

I don't have any major problems, but I would like to solve the problem..
Any idea ?

Thanks in advance !

RE: Postfix: fatal: No server certs available. TLS can't be enabled - RatS - 06-21-2008 06:55 PM

create certs Smile

RE: Postfix: fatal: No server certs available. TLS can't be enabled - ephigenie - 06-21-2008 07:55 PM

or read here for a more detailed howto (but only the TLS part is relevant ! )

http://postfix.state-of-mind.de/patrick.koetter/smtpauth/postfix_tls_support.html

RE: Postfix: fatal: No server certs available. TLS can't be enabled - ensit - 01-14-2009 10:46 PM

this problem is solved???? I am facing the same problem

RE: Postfix: fatal: No server certs available. TLS can't be enabled - rbtux - 01-16-2009 09:14 AM

thats no problem... configuration is just not finished...

RE: Postfix: fatal: No server certs available. TLS can't be enabled - DaSilva - 05-11-2009 02:45 AM

I have the same problem but I don't get it why because postconf -n shows me no tls entry:

Code:
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_at_myorigin = yes
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix
disable_vrfy_command = yes
inet_interfaces = all
invalid_hostname_reject_code = 554
local_destination_recipient_limit = 1
local_recipient_maps = unix:passwd.byname $alias_database
local_transport = local
mail_spool_directory = /var/mail
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 536870912
multi_recipient_bounce_reject_code = 554
mydestination = $myhostname, $mydomain
mydomain = $myhostname
myhostname = s1.server.tld
mynetworks_style = host
myorigin = $myhostname
non_fqdn_reject_code = 554
relay_domains_reject_code = 554
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP ispCP 1.0 Priamos Managed 1.0.0 RC7 OMEGA
smtpd_data_restrictions = reject_multi_recipient_bounce,                               reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,                               permit_sasl_authenticated,                               reject_invalid_helo_hostname,                               reject_non_fqdn_helo_hostname
smtpd_recipient_restrictions = reject_non_fqdn_recipient,                               reject_unknown_recipient_domain,                               permit_mynetworks,                               permit_sasl_authenticated,                               reject_unauth_destination,                               reject_unlisted_recipient,                               check_policy_service inet:127.0.0.1:10023,                               permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = reject_non_fqdn_sender,                               reject_unknown_sender_domain,                               permit_mynetworks,                               permit_sasl_authenticated
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/ispcp/transport
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
unknown_local_recipient_reject_code = 554
unknown_relay_recipient_reject_code = 554
unknown_virtual_alias_reject_code = 554
unknown_virtual_mailbox_reject_code = 554
unverified_recipient_reject_code = 554
unverified_sender_reject_code = 554
virtual_alias_maps = hash:/etc/postfix/ispcp/aliases
virtual_gid_maps = static:8
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_domains = hash:/etc/postfix/ispcp/domains
virtual_mailbox_limit = 0
virtual_mailbox_maps = hash:/etc/postfix/ispcp/mailboxes
virtual_minimum_uid = 1001
virtual_transport = virtual
virtual_uid_maps = static:1001

btw: Can I disable SASL or do I need it?