On Sun, 19 Feb 2012 16:00:43 +0100, Wietse Venema <wie...@porcupine.org>
wrote:
Therefore, the Equifax certificate wasn't found with 'smtp_tls_CApath
= /etc/ssl/certs'. For CApath to work, you need to run a program
that sets up the necessary symlinks (named after a certificate hash)
that allow the OpenSSL library to find the corresponding certificate
files.
AFAIK, Ubuntu updates those symlinks automatically. Also, while debugging
the issue I manually ran `c_rehash /etc/ssl/certs` several times.
To investigate, you can strace the SMTP daemon (see DEBUG_README.html)
and see what system calls fail. That will also show whether you
correctly followed instructions to turn of the chroot feature.
Thanks for the tip, I will try that.
--
Regards, Artemy
