On 2023-03-11 05:13:36 +0800, Jeremy Ardley wrote: > I just checked the headers of this mail as received from the list. I was a > bit surprised (pleasantly) to see debian is using IPv6 mail services. > > The headers show my dual stack edge router/mailer used an IPv6 connection to > Bendel rather than an IPv4 connection. > > Received: from edge.bronzemail.com > (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net > [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) > (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) > key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest > SHA256) > (Client did not present a certificate) > by bendel.debian.org (Postfix) with ESMTPS id 79E372070F > for <debian-user@lists.debian.org>; Fri, 10 Mar 2023 21:04:57 +0000 > (UTC) > > (Now to figure out why 'client did not present a certificate'. The > edge router/mailer has a letsencrypt certificate, so I guess I'll > have to tweak postfix a bit.)
Possibly due to IPv6, which yields the 2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net hostname, which is different from IPv4? But what's the point of a certificate in this particular case (the server bendel.debian.org does not need to authenticate the client)? -- Vincent Lefèvre <vinc...@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
