On Sat, Oct 31, 2015 at 10:16:37AM -0400, Wietse Venema wrote:
> hyndavirap...@bel.co.in:
> > AHQ.tcs.mil.example relay:[201.123.80.173]:25
> ...
> > [201.123.80.173]:25 encrypt match=AHQserver
> ...
> > CN=AHQserver/emailAddress=ahqserver_smtp_ad...@tcs.mil.example
>
> The match= requires a complete match (case-insensitive). You specify
> only a substring of the CN attribute.
Well the CN is just the short name, the real problem "encrypt" and
possibly an SAN DNS entries that preempt the CommonName from the
subject DN.
--
Viktor.
