-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Sat, 2022-09-03 at 17:41 +0000, ml+mailop--- via mailop wrote: > How did you notice that "something is now broken"?
A former client was trying to setup Fedora 36 sendmail with dane validation. F36 comes with sendmail 8.17.1 which is supposed to support dane, but they get verify=fail talking to my mail servers. So I googled for some dane test site, and found https://www.huque.com/bin/danecheck-smtp which also claims fail - so I assumed something in my config was broken. > "works for me" - I just tried it with an MTA that supports DANE: Thanks for that test! Perhaps both F36 sendmail and the gotls tool have the same bug with respect to the expired CA. https://dane.sys4.de/smtp/five-ten-sg.com says everything is ok. -----BEGIN PGP SIGNATURE----- iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYxPZ4RUcY2FybEBmaXZl LXRlbi1zZy5jb20ACgkQL6j7milTFsHueQCfegkSaw9Slh+WbOStk/ajBboNftIA nidR4grj8q0Ky6RYrwOk6tG4qo0j =6H2N -----END PGP SIGNATURE----- _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
