Could this patch or something similar please by applied? I've just
spent a frustrated hour getting a TLS connection to work, scratching my
head about these dreadful "certificate verification failed for
mail.gmx.net" messages in the syslog, until I finally discovered this
bug in the BTS.
On Tue, 09 Jun 2009 18:07:53 +0100, EmTeedee wrote:
> Package: postfix
> Version: 2.5.5-1.1
> Followup-For: Bug #287795
>
> I had the same problem on my systems.
> The attached patch will solve that problem.
>
> Since some of the certs are just symlinks to /usr/share/... I had to
> dereference the links to make it work in the chroot.
>
> TT
> --
>
> No trees were harmed in the sending of this message,
> however, a number of electrons were inconvenienced.
>
> --- init.d.orig 2009-06-09 16:37:58.000000000 +0000
> +++ init.d 2009-06-09 16:43:45.000000000 +0000
> @@ -84,6 +84,21 @@
> fi
> fi
>
> + # if we're using CApath, we need to copy the whole directory
> + ca_path=$(postconf -h smtp_tls_CApath)
> + if [ "X$ca_path" != "X" ]; then
> + # strip leading /
> + ca_path="${ca_path#/}"
> + # delete current copy
> + [ -d ${ca_path} ] && rm -rf ${ca_path}
> + mkdir -p ${ca_path}
> + if [ -d /${ca_path} ]; then
> + # copy hashes and dereference
> + cp -L /${ca_path}/*.0 ${ca_path}/
> + chmod -R a+rX ${ca_path}
> + fi
> + fi
> +
> # if we're using unix:passwd.byname, then we need to add
> etc/passwd.
> local_maps=$(postconf -h local_recipient_maps)
> if [ "X$local_maps" != "X${local_maps#*unix:passwd.byname}" ];
> then
Works like a charm for me, kudos to EmTeedee!
Sven
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
