https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253060
Michael Osipov <michael.osi...@siemens.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |b...@freebsd.org, | |kev...@freebsd.org, | |michael.osi...@siemens.com --- Comment #2 from Michael Osipov <michael.osi...@siemens.com> --- I have just hit the same issue in a jail. Sendmail is configured with a smart host (mail relay) company-internal, the mail server offers STARTTLS, sendmail follows and fails: > Jul 8 14:02:46 deblndw013x3j sm-mta[88641]: STARTTLS=client, > relay=mail2.siemens.de., version=TLSv1.2, verify=FAIL, > cipher=DHE-RSA-AES256-GCM-SHA384, bits=256/256 I have added company root and intermediate CA certificates to LOCALBASE and rehashed. As Leo desribed, both default values for CACERT and especially CACERT_PATH are unusable, the default config is unsuable. -- You are receiving this mail because: You are the assignee for the bug.