-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The Tuesday 2007-04-17 at 20:07 +0200, I wrote:
> The Tuesday 2007-04-17 at 17:27 +0200, Sandy Drobic wrote:
> > Please try:
> > smtp_sasl_mechanism_filter = cram-md5, login
>
> Ok, I tried that one and it worked!
I enabled TLS:
smtp_use_tls = yes
but that doesn't work:
Apr 18 01:01:38 nimrodel postfix/qmgr[15755]: ADFEBB6EAD: removed
Apr 18 01:01:38 nimrodel postfix/smtp[18419]: warning: connect to
private/tlsmgr: Connection refused
Apr 18 01:01:38 nimrodel postfix/smtp[18419]: warning: problem talking to
server private/tlsmgr: Connection refused
Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: connect to
private/tlsmgr: Connection refused
Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: problem talking to
server private/tlsmgr: Connection refused
Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: no entropy for TLS key
generation: disabling TLS support
I understand that using tsl for server is more complicated, defining keys,
etc. But as a client, I thought it was easier. I must be missing
something.
Ok... my config is thus (postconf | grep smtp_tls):
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_exclude_ciphers =
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_mandatory_ciphers = medium
smtp_tls_mandatory_exclude_ciphers =
smtp_tls_mandatory_protocols = SSLv3, TLSv1
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_policy_maps =
smtp_tls_scert_verifydepth = 5
smtp_tls_secure_cert_match = nexthop, dot-nexthop
smtp_tls_security_level =
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_tls_verify_cert_match = hostname
smtp_use_tls (default: no)
...
This feature is available in Postfix 2.2 and later. With
Postfix 2.3 and later use smtp_tls_security_level instead.
smtp_tls_security_level (default: empty)
The default SMTP TLS security level for the Postfix SMTP
client; when a non-empty value is specified, this overrides the
obsolete parameters smtp_use_tls, smtp_enforce_tls, and
smtp_tls_enforce_peername.
I set instead:
smtp_tls_security_level = may
but the error is the same.
- --
Cheers,
Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76
iD8DBQFGJV1MtTMYHG2NR9URAnxYAJ9OgTXYAbv94EZjvvwaMfeSvFFR3gCfYdz/
zXIHxB4jr31c9fHPgkqjZ6o=
=RQeV
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
