Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Eray Aslan
On 10.04.2010 19:04, Mick wrote: > On Saturday 10 April 2010 16:32:37 Eray Aslan wrote: >> On 10.04.2010 18:12, Robin Atwood wrote: >>> That's very interesting, I have puzzled about STARTTLS stuff for years! >>> How do I make sendmail trust the CAs? >> >> This is neither necessary nor recommended f

Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Mick
On Saturday 10 April 2010 16:32:37 Eray Aslan wrote: > On 10.04.2010 18:12, Robin Atwood wrote: > > That's very interesting, I have puzzled about STARTTLS stuff for years! > > How do I make sendmail trust the CAs? > > This is neither necessary nor recommended for TLS. Why would that be? > > def

Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Robin Atwood
On Saturday 10 April 2010, Mick wrote: > On Saturday 10 April 2010 16:32:37 Eray Aslan wrote: > > On 10.04.2010 18:12, Robin Atwood wrote: > > > That's very interesting, I have puzzled about STARTTLS stuff for years! > > > How do I make sendmail trust the CAs? > > > > This is neither necessary nor

Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Eray Aslan
On 10.04.2010 18:12, Robin Atwood wrote: > That's very interesting, I have puzzled about STARTTLS stuff for years! How > do > I make sendmail trust the CAs? This is neither necessary nor recommended for TLS. > define(`CERT_DIR',`/etc/mail/certs') > define(`confCACERT_PATH',`CERT_DIR') > define(

Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Robin Atwood
On Saturday 10 April 2010, Eray Aslan wrote: > On 10.04.2010 11:08, Mick wrote: > > Apr 9 21:45:47 my_box sendmail[4013]: STARTTLS=client, > > relay=smtp.comcast.net, version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA- > > AES256-SHA, bits=256/256 > > > > Any idea why this is happening? > > Nothin

Re: [gentoo-user] STARTTLS verification problem

2010-04-10 Thread Eray Aslan
On 10.04.2010 11:08, Mick wrote: > Apr 9 21:45:47 my_box sendmail[4013]: STARTTLS=client, > relay=smtp.comcast.net, version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA- > AES256-SHA, bits=256/256 > > Any idea why this is happening? Nothing to worry about. It just means you do not trust the certif