Hello!

I have a question regarding the following (smtpd_tls_ask_ccert):
<quote>
Unfortunately, Netscape clients will either complain if no matching
client certificate is available or will offer the user client a list of
certificates to choose from. Additionally some MTAs (notably some
versions of qmail) are unable to complete TLS negotiation when client
certificates are requested, and abort the SMTP session. So this option
is "off" by default.
</quote>

I know this is a client problem, but have anyone seen any impact for
enabling this? Is it a big problem now-days?

And can you somehow explicitly set this to only specified clients to
request client certificate?

/ Patrik



Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to