Re: TLS Client certificate expiry?

2010-05-16 Thread zhong ming wu
On Sun, May 16, 2010 at 6:03 AM, Hadmut Danisch had...@danisch.de wrote: On 16.05.2010 01:24, zhong ming wu wrote: On Sat, May 15, 2010 at 6:52 PM, Hadmut Danisch had...@danisch.de wrote: I am running a postfix server which allows relaying and using particular sender domains for some people,

Re: TLS Client certificate expiry?

2010-05-16 Thread Victor Duchovni
On Sun, May 16, 2010 at 12:52:56AM +0200, Hadmut Danisch wrote: So relaying and using local domains as sender domains is restricted with permit_mynetworks, permit_tls_clientcerts, permit_sasl_authenticated. Works as expected. There is a difference between permit_tls_clientcerts and

TLS Client certificate expiry?

2010-05-15 Thread Hadmut Danisch
Hi, just a configuration/security question: I am running a postfix server which allows relaying and using particular sender domains for some people, but not for the public. The authorised users have to authnticate either with SASL or TLS client certificates. Since the server works also as a

Re: TLS Client certificate expiry?

2010-05-15 Thread Hadmut Danisch
..btw., using postfix 2.6.5-3 (debian)