On Tue, May 13, 2014 at 10:50:32AM +0200, Patrick Ben Koetter wrote: > * Simon Effenberg <sa...@schuldeigen.de>: > > Hi @list, > > > > I have an issue with my SSL certificate. When I send a mail from another > > postfix to the one with the installed certificate it is complaining > > about an Untrusted TLS connection. The certificate uses SAN and is > > signed. OpenSSL tells me that everything is fine. When I test it through > > ssl-tools.net it is also fine. If I install it as an server certificate > > within an apache and test it through chrome it is fine as well. > > Untrusted = encrypted, but the identity has not been verified > Use DANE (Postfix 2.11.1+) for automated identity verification.
I know that untrusted means that the identity has not been verified. But it _should_ (that's why I'm confused). So DANE may be implemented in the future but for now it should work already. So any other ideas? Cheers Simon
