On Wed, Nov 26, 2008 at 06:50:13PM +0100, Jan P. Kessler wrote:

> would it be possible/valuable to enhance xforward by additional 
> attributes reflecting the tls parameters of the upstream smtp session? 
> Background is the current development of a content/proxyfilter.

What problem would this solve? If you need the client certificate
fingerprint consider the following:

    /etc/postfix/main.cf:
        smtpd_data_restrictions =
            check_ccert_access pcre:/etc/postfix/add_fprint_header.pcre

    /etc/postfix/add_fprint_header.pcre:
        /^(.*)$/        PREPEND X-TLS-Client-Fingerprint: ${1}

Additional information is recorded in Received headers when
$smtpd_tls_received_header=yes.

-- 
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[EMAIL PROTECTED]>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.

Reply via email to