| 1 |
On 10.04.2010 11:08, Mick wrote: |
| 2 |
> Apr 9 21:45:47 my_box sendmail[4013]: STARTTLS=client, |
| 3 |
> relay=smtp.comcast.net, version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA- |
| 4 |
> AES256-SHA, bits=256/256 |
| 5 |
> |
| 6 |
> Any idea why this is happening? |
| 7 |
|
| 8 |
Nothing to worry about. It just means you do not trust the certificate |
| 9 |
issuer for smtp.comcast.net. For smtp delivery, this is perfectly fine. |
| 10 |
See below: |
| 11 |
|
| 12 |
$ openssl s_client -connect smtp.comcast.net:25 -starttls smtp |
| 13 |
[...] |
| 14 |
SSL-Session: |
| 15 |
[...] |
| 16 |
Verify return code: 20 (unable to get local issuer certificate) |
| 17 |
|
| 18 |
versus when I tell it to trust some CAs (including verisign) on the |
| 19 |
local machine: |
| 20 |
|
| 21 |
openssl s_client -connect smtp.comcast.net:25 -starttls smtp -CApath |
| 22 |
/etc/ssl/certs/ |
| 23 |
[...] |
| 24 |
SSL-Session: |
| 25 |
[...] |
| 26 |
Verify return code: 0 (ok) |
| 27 |
|
| 28 |
-- |
| 29 |
Eray |
Archives