Re: TLS for dummies

2010-08-26 Thread Eray Aslan
On 26.08.2010 02:47, Security Admin (NetSec) wrote: Is there an existing file or a weblink that would list the current accepted global root CAs? Since the only one in the exchange.pem file is from my Exchange Server, I could append to this file all the necessary trusted root CAs. Don't do

Re: TLS for dummies

2010-08-26 Thread Jerry
On Wed, 25 Aug 2010 16:47:46 -0700 Security Admin (NetSec) secad...@netsecdesign.com articulated: smtp_tls_CAfile = /etc/postfix/exchange.pem You can list more CAs in this file if you wish. Is there an existing file or a weblink that would list the current accepted global root CAs?

TLS for dummies

2010-08-25 Thread Security Admin (NetSec)
This is more of an annoyance than anything else. When my Postfix (v 2.6.7) attempts to send a message via TLS the following warning is received: postfix/smtp[28338]: certificate verification failed for mail.x.org[xxx.xxx.xxx.xxx]:25: untrusted issuer

Re: TLS for dummies

2010-08-25 Thread Jeroen Geilman
On 08/25/2010 02:59 PM, Security Admin (NetSec) wrote: This is more of an annoyance than anything else. When my Postfix (v 2.6.7) attempts to send a message via TLS the following warning is received: postfix/smtp[28338]: certificate verification failed for

Re: TLS for dummies

2010-08-25 Thread Victor Duchovni
On Wed, Aug 25, 2010 at 05:59:10AM -0700, Security Admin (NetSec) wrote: postfix/smtp[28338]: certificate verification failed for mail.x.org[xxx.xxx.xxx.xxx]:25: untrusted issuer /C=US/O=Entrust.net/OU=www.entrust.net/CPS incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net

RE: TLS for dummies

2010-08-25 Thread Security Admin (NetSec)
smtp_tls_CAfile = /etc/postfix/exchange.pem You can list more CAs in this file if you wish. Is there an existing file or a weblink that would list the current accepted global root CAs? Since the only one in the exchange.pem file is from my Exchange Server, I could append to this file all the

RE: SSL/TLS for dummies

2009-03-17 Thread Security Admin (NetSec)
To: postfix-users@postfix.org Subject: Re: SSL/TLS for dummies 2009/3/17 Security Admin (NetSec) secad...@netsecdesign.com: Someday (maybe today) I will WRITE DOWN the proper way to generate and export certificates.  Getting this warning in my maillog: warning: cannot get private key from file

SSL/TLS for dummies

2009-03-16 Thread Security Admin (NetSec)
Someday (maybe today) I will WRITE DOWN the proper way to generate and export certificates. Getting this warning in my maillog: warning: cannot get private key from file /etc/postfix/privkey.pem Doesn't stop TLS from occurring, it is just annoying. TLS is used between postfix mail gateways

Re: SSL/TLS for dummies

2009-03-16 Thread Barney Desmond
2009/3/17 Security Admin (NetSec) secad...@netsecdesign.com: Someday (maybe today) I will WRITE DOWN the proper way to generate and export certificates.  Getting this warning in my maillog: warning: cannot get private key from file /etc/postfix/privkey.pem Doesn't stop TLS from occurring,