Re: LMTPS : TLS over LMTP not working

[Reindl Harald]

Am 17.11.2014 um 11:24 schrieb Stanislas SABATIER:

I setup a service in master.conf like this :

dovecotsandbox unix -       -       n       -       10       lmtp
   -o lmtp_send_xforward_command=yes
   -o lmtp_tls_security_level=encrypt

Then I tried to add starttls option :
   -o lmtp_tls_note_starttls_offer=yes

But Postfix still can't deliver the email. Postfix log :
(…) status=deferred (TLS is required, but was not offered by host 
xx.xx.xx.xx[xx.xx.xx.xx])

that you should have included in your first post
as somebody else said: seems not to be supported now

just setup a SSH tunnel and let postfix deliver to 127.0.0.1:port

Le 17 nov. 2014 à 11:03, Reindl Harald <h.rei...@thelounge.net> a écrit :

Am 17.11.2014 um 10:58 schrieb Stanislas SABATIER:

Hello,
I tried to activate SSL on LMTP service, to secure connections between Postfix 
and Dovecot on my LAN, but Dovecot is not negociating a TLS session with 
Postfix.
If I enforce TLS for LMTP at Postfix's side,  communication between Postfix and 
Dovecot is not working.

I put
   ssl = yes
   ssl_cert = </dovecot/ssl/ssl-LMTP.pem
   ssl_key = </dovecot/ssl/ssl-LMTP.key
in section protocol LMTP within 20-lmtp.conf

and
service lmtp {
   inet_listener lmtp {
     name = dovecot_lmtp
     address = xx.xx.xx.xx
     port = 26
     ssl = yes
   }
   process_min_avail = 5
}
within 10-master.conf

Did I miss something?

did you configure postfix?
postconf -d | grep tls

not sure if postfix prefers STARTTLS only (likely since the smtop-client also 
don't support wrapper mode and lmtp is more or less the same as smtp)

signature.asc
Description: OpenPGP digital signature