can anyone *confirm* TLS function in Cyrus-Imap (v2.3.7) ?

[Richard]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

hi,

SSL certs & TLS usage are fine/good on my system with other mail apps,
but, so far, w/ cyrus-latest, no luck.

after a successful server build/install/launch, an (simple?) attempt to
check TLS function w/:

	% imtest -v \
	  -t "/var/CERTS/mail.testdomain.com.CYRUSkey.rsa.pem" \
	  -p imap \
	  -m digest-md5 \
	  -a testuser.admin at mail.testdomain.com \
	  -u testuser.admin at mail.testdomain.com \
	  -r mail.testdomain.com \
	  mail.testdomain.com

reports/fails @;

S: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS LOGINDISABLED]
mail.testdomain.com Cyrus IMAP4 v2.3.7 server ready
C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS LOGINDISABLED ACL
RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME
UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE
IDLE LISTEXT LIST-SUBSCRIBED URLAUTH
S: C01 OK Completed
C: S01 STARTTLS
S: S01 OK Begin TLS negotiation now
starting TLS engine
unable to get certificate from
'/var/CERTS/mail.testdomain.com.CYRUSkey.rsa.pem'
TLS engine: cannot load cert/key data
Start TLS engine failed
Asking for capabilities again since they might have changed
C: C01 CAPABILITY
S: S01 NO Starttls negotiation failed
S: * BAD Invalid tag


every check i've been able to muster on the cert itself is 'ok' ...

either i'm doing something wrong in/with cyrus (possible/likely ...), or
there's a problem.

can *someone* please lend a hand?

thanks,

richard

- --

/"\
\ /  ASCII Ribbon Campaign
 X   against HTML email, vCards
/ \  & micro$oft attachments

[GPG] OpenMacNews at gmail dot com
fingerprint: 50C9 1C46 2F8F DE42 2EDB  D460 95F7 DDBD 3671 08C6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iEYEAREDAAYFAkTZ9xUACgkQlffdvTZxCMaCoACbBKEXuYfcjh9Z/PhwPnnCqXtK
kAIAoLOqCUJUVXuth6vgMYiX2oDLzUQ9
=0wxO
-----END PGP SIGNATURE-----