Hello:

Suresh Ramasubramanian wrote,
> +++ Raju Mathur [linux-india] <02/12/01 20:41 +0530>:
> > Couple of questions about sendmail.  I enabled SMTP AUTH (using the
> > Cyrus SASL and PLAIN and LOGIN methods) on a stock Red Hat 7.1
> > Sendmail 8.11.  The LOGIN works fine for local users relaying mail
> > through the company server, except for a couple of issues.
> 
> Fair enough

Outlook express does not support CRAM-MD5 or DIGEST-MD5 anyways!
 
> > First off, I also need to enable STARTTLS in order not to have
> > passwords transmitted in clear-text over the wire.  However, STARTTLS
> > appears to require a certificate on the client side, and self-signed
> > client side certificates don't seem to work, especially with Outlook
> 
> The server can send a self-signed certificate, which the client has to accept
> ONCE and declare a valid / trusted certificate.

Hmm... Are you sure? I am using STARTTLS + SMTP AUTH without client side
certificates! AFAIK, during the TLS session, Sendmail will first ask for
client certificate, if a certificate is not received, AUTH will be used
instead. IIRC, Sendmail 8.12 onwards, this is a .cf option - you can
enable or disable client certificates.

-- Shanu

-- 
C-3PO: 
        Sir, the possibility of successfully navigating
        an asteroid field is approximately 3,720 to 1!
Han Solo:
        Never tell me the odds!

_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to