Mark Watts wrote:
When you're sending mail, no client certificate is requested. Your postfix doesn't know (and doesn't care) that the client has a self-signed certificate.
Ooops, spoke backwards there. When you receive mail (the smtpd server) no certificate is requested, so no certificate verification is performed and no complaints are logged.
Indeed, but its the *remote servers* than have self-signed certificates. The originating server doesn't have any certificates at all. I've simply configured "smtp_use_tls = yes" and "smtp_tls_loglevel = 1". The logs are from the originating server.
Right. -- Noel Jones
