Hi Andreas,

> Am 14.08.2019 um 10:01 schrieb A. Schulze <s...@andreasschulze.de>:
> 
> 
> Christian Rößner:
> 
> Hello Christian,
> 
>> By changing *_CAfile parameters to *_CApath, everything started working 
>> again.
> 
> nothing specific to your OpenSSL version but: do you run postfix chroot?
> from http://www.postfix.org/postconf.5.html#smtpd_tls_CApath:

The system is not running chroot.

> 
>  "To use smtpd_tls_CApath in chroot mode, this directory (or a copy) must be 
> inside the chroot jail."
> 
> Andreas
> 
> OT:
>> tls_ssl_options = NO_COMPRESSION
> 
> as you're using latest postfix+openssl, you may want to add "no_renegotiation"

Thanks, I will add this :-)

Christian
-- 
Rößner-Network-Solutions
Karl-Bröger-Str. 10, 36304 Alsfeld
Fax: +49 6631 78823409, Mobil: +49 171 9905345
USt-IdNr.: DE225643613, https://roessner.website
PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5 

Reply via email to