Re: Question regarding smtpd and log of “Untrusted TLS connection”

2017-10-21 Thread Viktor Dukhovni
> On Oct 21, 2017, at 2:03 AM, J Doe wrote: > > Ok. In the context of smtpd (receiving mail), I note three states in the log: > >Authenticated TLS ... >Untrusted TLS ... >Anonymous TLS ... > > I am pretty sure what most of those are referring to, but

Re: Question regarding smtpd and log of “Untrusted TLS connection”

2017-10-21 Thread J Doe
Hi Viktor, > On Oct 20, 2017, at 6:14 PM, Viktor Dukhovni > wrote: > >> In the documentation I have noted that even if STARTTLS is enabled, mail >> delivery will not be stopped even if the certificate at the other server >> is invalid or is a self-signed

Re: Question regarding smtpd and log of “Untrusted TLS connection”

2017-10-20 Thread Viktor Dukhovni
> On Oct 20, 2017, at 4:54 PM, J Doe wrote: > > I currently have a Postfix 3.1.0 server with smtpd configured to use > opportunistic TLS encryption: > >/etc/postfix/main.cf >smtpd_tls_security_level = may This setting is for inbound mail from remote

Re: Question regarding smtpd and log of “Untrusted TLS connection”

2017-10-20 Thread Noel Jones
On 10/20/2017 3:54 PM, J Doe wrote: > I am wondering two things: > > [1] Am I correct that the remote server has not been authenticated but has > used encryption ? > Correct. > [2] Is it not authenticated in this case because the remote server appears to > be a self-signed certificate ? >

Question regarding smtpd and log of “Untrusted TLS connection”

2017-10-20 Thread J Doe
Hello, I currently have a Postfix 3.1.0 server with smtpd configured to use opportunistic TLS encryption: /etc/postfix/main.cf smtpd_tls_security_level = may In the documentation I have noted that even if STARTTLS is enabled, mail delivery will not be stopped even if the