<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hallo Andreas,</p>
<p>wenn das dein richtiger PrivateKey unten ist, dann solltest du sofort das Zertifikat sperren lassen,
und das Zertifikat mit einem neuen Schlüssel anfordern.</p>
<p>
</p>
<p>Grüße</p>
<p>Stephan</p>
<p>
</p>
<div class="moz-cite-prefix">On 22.01.20 18:52, Andreas Günther
wrote:<br>
</div>
<blockquote type="cite" cite="mid:6157818.KRNRza1qV7@stuttgart">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta name="qrichtext" content="1">
<style type="text/css">
p, li { white-space: pre-wrap; }
</style>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Hallo Klaus,</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">sorry wenn ich erst jetzt antworte. Anbei meine Ergebnisse soweit machbar.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Eine Überprüfung, ob privkey.pem auch o.k. ist könntest Du mal mit</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> # openssl rsa -noout -modulus -in</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> /opt/dehydrated-master-dovecot/certs/imap.tachtler.net/privkey.pem |</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> openssl md5</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> (stdin)= ...</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> durchführen, oder mit</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> # openssl rsa -noout -text -in</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> /opt/dehydrated-master-dovecot/certs/imap.tachtler.net/privkey.pem</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Private-Key: (4096 bit)</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> modulus: ...</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Sind die Konfigurationen bzw. die Ausgaben gültig bei Dir?</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">openssl rsa -noout -text -in /etc/ssl/mail/mail.key </span><span style=" font-family:'monospace';">
RSA Private-Key: (2048 bit, 2 primes)
modulus:
00:cc:5e:80:92:62:b9:23:5d:04:b9:17:bd:7e:b0:
dc:15:77:82:48:a1:af:d1:41:77:61:fe:09:1e:ff:
f9:6d:41:2e:9c:99:b2:f1:65:82:03:6c:ae:62:01:
ff:98:e2:f1:8b:9e:ae:e7:4d:d6:14:6a:93:f9:ea:
85:99:c3:ae:f4:45:73:b6:64:b6:d8:80:be:42:f8:
32:2f:b2:18:f8:54:26:d0:df:d3:0f:7b:6e:71:13:
12:43:59:e2:3b:5a:5a:e1:c3:b0:25:22:ee:a1:b9:
ac:d6:55:0e:70:69:d9:57:88:cc:07:4b:ca:89:f1:
9f:f7:20:d6:39:46:14:13:6d:f6:4d:88:d7:ce:ea:
12:e0:d2:d2:f0:19:06:b5:c3:26:ab:dc:42:24:76:
fa:c9:e3:25:d5:92:7c:c4:57:60:c7:23:2e:fb:9d:
bf:d0:af:fa:77:9d:dc:24:25:18:11:84:2b:cb:9c:
a2:91:9a:87:26:d8:e2:f6:d7:b1:72:a3:4c:40:78:
36:4f:e2:4b:d2:0b:92:e0:0c:34:bc:07:68:0d:bd:
fb:12:90:09:fd:7d:0d:a9:bb:a9:b4:41:c5:aa:93:
75:02:cb:e0:bc:66:4f:f2:bc:41:b6:3a:f9:dc:07:
2e:b3:f0:ee:46:f4:03:30:17:4d:07:f7:33:3e:21:
f5:21
publicExponent: 65537 (0x10001)
privateExponent:
56:db:fb:6d:3c:04:4f:e1:62:f6:7f:fe:8b:f0:03:
3a:24:76:fd:03:ab:44:16:bc:f4:ab:11:99:59:55:
db:77:8e:a6:04:35:27:9f:ea:e8:25:b2:df:f8:d5:
77:57:4d:2d:f8:1d:82:35:74:bd:6c:a6:c3:db:47:
39:19:10:2c:c5:af:ee:5f:53:cf:24:b8:b8:a1:e0:
42:a1:41:37:9a:1c:7d:3e:03:e8:5a:9f:8f:f3:79:
19:a3:04:22:11:be:fa:a1:3f:26:29:78:9e:c7:d9:
8b:a6:ce:e2:3c:3a:a1:97:84:8f:bd:48:b1:e4:3e:
06:bc:b0:0f:db:97:00:c2:42:e3:f4:9f:c3:08:de:
b7:ee:8f:81:01:f0:85:76:d9:46:25:2a:e7:0b:e8:
6c:30:83:43:7b:25:64:b5:f1:ea:c3:8d:88:2e:af:
e7:37:6f:c2:3f:a8:15:5e:33:c1:32:b5:84:61:00:
c5:a7:1f:33:aa:f5:0d:ad:53:6a:ed:b6:ee:2a:28:
3c:4c:0e:be:d8:58:7d:9c:df:34:ed:e8:68:29:86:
68:11:1e:f8:b3:52:48:4a:6a:7f:37:22:a1:c7:8f:
6e:bb:01:08:3c:04:b0:97:ae:f6:97:cc:d6:02:de:
ee:6e:c4:8a:c8:5c:80:7e:db:0d:61:45:27:6a:c5:
a1
prime1:
00:f2:1b:27:85:4b:00:98:d9:33:7a:6c:b6:c0:88:
d8:63:15:84:32:cb:d5:3e:eb:5a:03:17:64:53:8a:
8a:b3:9b:b6:77:2e:5c:59:c1:3e:9a:17:3c:c8:b4:
c2:7b:5d:d9:d7:a4:19:e5:10:b0:60:f0:1a:85:dc:
37:74:6c:e6:50:8c:63:e1:1d:52:82:42:b5:c6:0b:
d0:dd:00:ef:c8:8f:e3:33:d2:d2:7e:5f:80:4c:ea:
52:fc:99:07:01:6e:68:ee:dc:20:81:25:8d:a7:44:
70:97:3f:2f:2c:93:58:dc:b4:13:91:60:c7:b6:41:
e2:97:df:8b:16:6b:e8:a4:0d
prime2:
00:d8:18:f1:cd:d2:69:f2:9a:fe:79:bb:90:23:f4:
58:2a:0e:2b:58:ab:15:81:7d:11:6b:f0:36:0e:9c:
4f:f8:5c:b1:2f:c3:24:c2:69:01:00:43:1f:02:70:
ed:37:97:22:05:db:76:1e:b3:01:60:2e:99:5f:94:
66:79:33:88:df:6f:07:3d:cf:de:4d:c5:2a:2b:1b:
c2:a4:4f:6b:d5:c5:8f:cb:71:98:75:d1:78:ac:20:
8c:8c:bd:65:23:2f:8d:f9:bb:4c:78:b9:4d:56:29:
10:05:94:73:17:d7:5c:7e:cd:3e:a1:0f:e4:11:4a:
f7:14:13:ff:58:0f:03:2c:65
exponent1:
01:44:61:1d:92:79:eb:52:df:b1:19:56:8f:85:67:
d4:84:ed:4f:32:bf:e7:f7:65:5e:34:c6:22:a5:cb:
fa:0a:ab:96:ce:18:4f:a3:f2:46:ee:2e:34:42:b5:
ed:dd:5c:e1:83:0b:5b:a6:8d:b5:c4:2b:ef:5d:6a:
b0:e2:4d:06:48:e5:d0:ec:cd:5c:bf:2a:a2:61:b7:
73:20:a9:20:9c:98:2c:d2:42:a5:c4:ac:30:3a:dd:
ba:52:b6:b5:ac:35:42:62:c6:8c:c6:7c:8a:4e:92:
64:48:41:5f:f3:59:78:b6:3c:8f:fb:38:b0:5c:81:
ea:17:92:6b:c8:9e:cc:15
exponent2:
40:9f:dd:18:4f:57:ad:dc:da:43:6f:6b:20:c5:7e:
e4:3c:ce:8b:ba:c6:38:ae:3d:5a:89:40:b1:47:df:
c6:87:79:d9:ad:c3:3d:7c:87:77:1b:9b:97:70:4c:
10:b6:da:ce:e3:9d:c4:7a:85:eb:cc:a3:c3:68:ae:
e8:8a:17:e1:b1:e3:79:81:c3:9a:80:5f:26:fb:2b:
4f:56:0d:0a:a6:05:65:b2:f8:04:2b:fb:a9:86:26:
62:24:75:ad:7b:18:3b:59:de:f9:af:78:c8:4e:89:
63:11:cd:05:91:3b:31:14:92:29:3a:86:5b:01:8f:
38:6a:ee:8e:d8:16:7b:dd
coefficient:
00:c1:5e:44:4d:30:72:8f:c0:b0:5e:c2:12:56:c3:
a2:cd:7e:19:ca:28:3a:2b:03:d3:fb:44:2d:7b:ca:
44:50:3a:2a:28:21:5c:9f:ba:8b:86:89:13:4c:34:
ef:b6:9e:c6:04:8b:bb:c5:58:f0:7a:4c:74:f0:33:
f5:28:02:92:5a:b4:8e:b9:d0:85:6d:37:d9:3f:c7:
27:9b:92:38:80:96:86:b7:35:32:67:ab:77:d0:7e:
70:c2:f6:b9:87:94:9d:54:65:90:32:12:69:c8:aa:
e1:92:4d:ac:63:c8:fd:e4:df:83:af:b3:ba:68:6f:
9a:a3:99:93:10:d6:56:ec:1b
repektive</span></p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'monospace'; color:#000000; background-color:#ffffff;">openssl rsa -noout -modulus -in /etc/ssl/mail/mail.key </span><span style=" font-family:'monospace';">
Modulus=CC5E809262B9235D04B917BD7EB0DC15778248A1AFD1417761FE091EFFF96D412E9C99B2F16582036CAE6201FF98E2F18B9EAEE74DD6146A93F9EA8599C3AEF44573B664B6D880BE42F8322FB218F85426D0DFD30F7B6E7113124359E23B5A5AE1C3B02522EEA1B9ACD6550E706
9D95788CC074BCA89F19FF720D6394614136DF64D88D7CEEA12E0D2D2F01906B5C326ABDC422476FAC9E325D5927CC45760C7232EFB9DBFD0AFFA779DDC24251811842BCB9CA2919A8726D8E2F6D7B172A34C4078364FE24BD20B92E00C34BC07680DBDFB129009FD7D0DA9BBA9B441C5AA
937502CBE0BC664FF2BC41B63AF9DC072EB3F0EE46F40330174D07F7333E21F521
Und hier hänge ich gerade fest, denn ich habe nicht Centos sondern Debian im Einsatz:</span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> Erstellt werden kann die Datei mit nachfolgendem Befehl:</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> /usr/libexec/dovecot/ssl-params -c /etc/dovecot/ssl-parameters.conf</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">ssl-params gibt es schlicht weg nicht auf meinem System. Ich finde momentan auch kein deb-Package, in dem das stecken könnte.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Beste Grüße</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Andreas</p>
</blockquote>
</body>
</html>