TLS: unable to get certificate ...

[brian]

brian wrote:
> brian wrote:
>> cyrus-imapd-2.3.9-7.fc7
>> openssl-0.9.8b-15.fc7
>>
>> I'm trying (and failing) to set up TLS and hope someone might be able to 
>> shed some light on my problem. Authentication failed so I checked 
>> maillog and found:
>>
>> imap[30288]: TLS server engine: cannot load CA data
>> imap[30288]: unable to get certificate from 
>> '/etc/pki/tls/certs/imapcert.pem'
>> imap[30288]: TLS server engine: cannot load cert/key data
>> imap[30288]: error initializing TLS
>>
>>

I've solved this by:

   cp /etc/pki/CA/cacert.pem cyrus-imapd/
   chgrp mail /etc/pki/cyrus-imapd/cacert.pem

imapd was not able to read anything in /etc/pki/CA so I can't think of 
any other solution. I'd appreciate any tips if this is a Bad Idea.