>>>>> "DS" == Dirk Stöcker <post...@dstoecker.de> writes:

DS> - GnuTLS and OpenSSL both give an unspecified error (could this be
DS> due to missing SNI support?).

gnutls-cli says:

,----
| Status: The certificate is NOT trusted. The certificate issuer is
| unknown. The name in the certificate does not match the expected.
`----

unless one adds not only --dane, but also --no-ca-verification.  Which
is expected given the cert and the 3_0_1 tlsa.

posttls-finger mail.cryptedmail.eu shows that postfix will be happy to
deliver there, requiring tls if so configured.

-JimC
-- 
James Cloos <cl...@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6

Reply via email to