On Tue, Jul 02, 2019 at 04:03:51PM -0400, David Mehler wrote:
> I'm running postfix 3.4.5 and email sending/receiving is working. I am
> however noticing an message:
>
> Jul 2 14:59:44 mail postfix/smtp[14345]: Untrusted TLS connection
> established to gmail-smtp-in.l.google.com[173.194.68.27]:25: TLSv1.3
> with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519
> server-signature RSA-PSS (2048 bits) server-digest SHA256
The message just records that the certificate was not verified, but
no verification was required for delivery to proceed, so verification
is in any case pointless.
> I've googled and i've checked for the options smtpd_tls_CApath and
> smtp_tls_CApath both of which are blank. My tls configuration is using
> letsencrypt-generated certificates.
>
> Is there a fix for this?
There is nothing to fix, everything is working as expected.
--
Viktor.
