Would it be possible to see tlsproxy logging between > > servername postfix/tlsproxy[pid]: CONNECT to [10.11.12.13]:25
and > servername postfix/tlsproxy[pid]: mail.somedomain.net[10.11.12.13]:25: > depth=1 matched trust anchor certificate sha512 digest and > servername postfix/tlsproxy[pid]: CA certificate verification > failed for mail.somedomain.net[10.11.12.13]:25: num=28:certificate > rejected No need to send that to the mailing list. Wietse