On Jan 31, 2015, at 4:28 PM, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote:
> On Sat, Jan 31, 2015 at 03:34:35PM -0700, LuKreme wrote:
> 
>> Since I am not seeing a load of these, I am assuming this is indicating the 
>> error is on the other end?
>> 
>> TLS library problem: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert 
>> bad certificate:s3_pkt.c:1293:SSL alert number 42:
> 
> Was there a good reason to remove the beginning of the log message?
> The IP address of the peer?

The start was just date stamp info and PID:

Jan 31 01:52:10 mail postfix/smtpd[62297]: warning: TLS library problem: 
error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad 
certificate:s3_pkt.c:1293:SSL alert number 42:

> The peer send an SSL alert indicating it is unhappy about your
> certificate.  Presumably, you're on the server end, and the peer
> does not like your certificate contents.
> 
> Whether this is your fault or not, depends on whether my assumptions
> are correct, and whether the peer can legitimately expect to be
> able to verify your certificate.

This is the only warning of this sort I see, so I’m assume it’s their issue.

Looking at the previous line,

Jan 31 01:52:10 mail postfix/smtpd[62297]: SSL_accept error from 
mail-luna36.mailgun.org[173.193.210.36]: 0

Is that what you were looking for?

-- 
"Eureka," he said. "Going to have a bath then?"

Reply via email to