On 12/13/07, Mihira Fernando <[EMAIL PROTECTED]> wrote:
> On Wed December 12 2007 10:58 am, hce wrote:
> > Almost, but it has following error for certificates, it seems that was
> > a ssl proglem, but I don't know how to fix it:
> >
> > Dec 12 21:50:42 debian postfix/master[2740]: reload configuration
> > /etc/postfix Dec 12 21:50:42 debian postfix/qmgr[4881]: B7BFE62:
> > from=<[EMAIL PROTECTED]>, size=455, nrcpt=1 (queue active)
> > Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=20:unable to get local issuer
> > certificate
> > Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=27:certificate not trusted
> > Dec 12 21:50:45 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=21:unable to verify the first
> > certificate
> > Dec 12 21:50:46 debian postfix/smtp[4884]: warning: SASL
> > authentication failure: No worthy mechs found
> > Dec 12 21:50:46 debian postfix/smtp[4884]: B7BFE62: SASL
> > authentication failed; cannot authenticate to server
> > smtp.gmail.com[64.233.167.109]: no mechanism available
> > Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=20:unable to get local issuer
> > certificate
> > Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=27:certificate not trusted
> > Dec 12 21:50:49 debian postfix/smtp[4884]: certificate verification
> > failed for smtp.gmail.com: num=21:unable to verify the first
> > certificate
> > Dec 12 21:50:50 debian postfix/smtp[4884]: warning: SASL
> > authentication failure: No worthy mechs found
> > Dec 12 21:50:50 debian postfix/smtp[4884]: B7BFE62:
> > to=<[EMAIL PROTECTED]>, relay=smtp.gmail.com[64.233.167.111]:587,
> > delay=1022, delays=1015/0.17/7.1/0, dsn=4.7.0, status=deferred (SASL
> > authentication failed; cannot authenticate to server
> > smtp.gmail.com[64.233.167.111]: no mechanism available)
> >
> >
> > I should clarify that my main.cf was copied from a friend's Ubuntu
> > machine. Not sure if something was missing? I did check that
> > /etc/ssl/certs/ssl-cert-snakeoil.pem and
> > /etc/ssl/private/ssl-cert-snakeoil.key did exist.
> Ubuntu may have its own customizations that Debian does not have. NEVER copy
> and paste a main.cf from someone else!
> >
> > $ sudo /usr/sbin/postconf -n
> > alias_database = hash:/etc/aliases
> > alias_maps = hash:/etc/aliases
> > append_dot_mydomain = yes
> > biff = no
> > canonical_maps = hash:/etc/postfix/canonical
> > config_directory = /etc/postfix
> > inet_interfaces = loopback-only
> > inet_protocols = ipv4
> > mailbox_size_limit = 51200000
> > masquerade_domains = localhost
> > mydestination =
> > myhostname = debian
> > mynetworks = 127.0.0.0/8
> > myorigin = /etc/mailname
> > recipient_delimiter = +
> > relayhost = smtp.gmail.com:587
> > smtp_sasl_auth_enable = yes
> > smtp_sasl_mechanism_filter = login
> > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> > smtp_sasl_security_options = noanonymous
> > smtp_sasl_type = cyrus
> > smtp_tls_CApath = /etc/ssl/certs
> > smtp_tls_security_level = may
> > smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
> > smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
> > smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
> > smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
> > smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
> > smtpd_use_tls = yes
> >
> >
> > How can I fix it?
>
> Asusming that above listed is your server's postconf output,
> As root run :
> Lets not use unknown variables here so :
>
> # postconf -e smtpd_banner=$myhostname
>
> Your forgot the square brackets for the relayhost. This is not a must but it
> helps speed things up as square brackets stops postfix from doing MX lookups.
>
> #postconf -e relayhost=[smtp.gmail.com]:587
>
> AFAIK, no need to use CApaths for relaying with Gmail.
> # postconf -e smtp_tls_CApath=
>
> and reload Postfix.
>
> Mihira.
I did exactly as per above, but it still cannot post as the same
following ssl errors, is there something missing?
Dec 13 21:43:53 debian postfix/smtp[4100]: certificate verification
failed for smtp.gmail.com: num=20:unable to get local issuer
certificate
Dec 13 21:43:53 debian postfix/smtp[4100]: certificate verification
failed for smtp.gmail.com: num=27:certificate not trusted
Dec 13 21:43:53 debian postfix/smtp[4100]: certificate verification
failed for smtp.gmail.com: num=21:unable to verify the first
certificate
Dec 13 21:43:54 debian postfix/smtp[4100]: warning: SASL
authentication failure: No worthy mechs found
Dec 13 21:43:54 debian postfix/smtp[4100]: 1514042A99: SASL
authentication failed; cannot authenticate to server
smtp.gmail.com[209.85.199.111]: no mechanism available
Thank you.
Kind Regards,
Jim
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
