Thanks for the replay Quanah. I agree. Unfortunately the root problem I see is that proxymap is not reading the CA I'm trying to provide via the tls_ca_cert_file (or dir) configuration in my alias map. Strace demonstrates that postmap loads the CA and performs lookups over tls fine, but proxymap does not load the CA, hence determines the cert to be invalid. I've posted output from syslog and strace in my last reply to Victor on this thread.

-Nick Geron

Quanah Gibson-Mount wrote:
--On Wednesday, February 25, 2009 11:59 AM -0600 Nick Geron <nge...@corenap.com> wrote:

I think this is fairly clear -- It doesn't see that the cert you've provided has a valid CA.

--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Reply via email to