On Sun, Apr 22, 2007 at 07:27:05AM -0400, Scott wrote:
> On Sun, Apr 22, 2007 at 06:23:21AM -0400, Scott wrote:
> 
> 
> 
> > 
> > Follow-up on this--I see now that when I first installed postfix, I
> > chose to leave off TLS support. 
> > 
> 
> Yet another followup.  On FreeBSD, openssl is part of the base system.
> There was a cert.pem in /etc/ssl.  All my .msmtprc needed was the line
> 
> tls_trust_file /etc/ssl/cert.pem 
> 
> Now I have to find it on the Arch box.  :) It's probably there.  
> To the original poster, I'll be updating my page on this very shortly.

Ok, there doesn't seem to be a cert.pem with Arch's ssl.  The gnupg2
package has something, but it didn't work (slightly different name,
com-certs.pem, but I got an error of unable to decode.)

For the original poster (I'll put this on forums in a few minutes too.)

I'm putting up a certs.pem that you can use, assuming you trust me.  (In
general, I would advise against trusting someone you don't know, but
this is up to you.)  You can grab it at http://www.scottro.net/cert.pem.
(Use wget rather than a browser.)  It worked on Arch.  It is maintained
in conjunction with the FreeBSD security officer.  

All you need in your .msmtprc is 
tls_trust_file <path_to_cert.pem> and it will work.

Tobias, obviously your lady's health is the most important thing and I
don't know what would be involved in maintaining a separate cert.pem
package, but perhaps that's the best thing, make a separate package for
it.  Or perhaps install courier, grab the pem package then uninstall it.
:)


-- 

Scott Robbins

PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

Miss Calendar: Okay, so this Master guy tried to open the
Hellmouth, but he got stuck in it.  And now, all the signs are reading
that he's going to get out, which opens the Hellmouth, which brings
the demons which ends the world.
Giles: Yes. That about sums it up, yes. 
Miss Calendar: The part that gets me, though, is where Buffy is the
Vampire Slayer. She's so little.

_______________________________________________
arch mailing list
[email protected]
http://archlinux.org/mailman/listinfo/arch

Reply via email to