Le 27/09/2019 à 17:01, Emmanuel Fusté a écrit :
Hello,

I started to deploy TLS connection reuse on some non trivial outboud gateway setups.

First I was hit by an non obvious configuration behavior:
On my gateway I have:
smtpd_tls_security_level=none
smtp_tls_security_level=dane

If I switch to TLS session reuse with
smtp_tls_connection_reuse=yes

I get:
tlsproxy: warning: TLS service is requested, but disabled with tlsproxy_tls_security_level or tlsproxy_use_tls
smtp: warning: private/tlsproxy service role "client" is not available.

By default tlsproxy_tls_security_level=$smtpd_tls_security_level
I overwrite it with tlsproxy_tls_security_level=may and it worked.

But as tlsproxy_client_level = $smtp_tls_security_level (=dane) why I need to enable tlsproxy "server" part to get the "client" part working ? Overlook/Bug ?

Yeahh, fixed in 3.5.2/3.4.12

Thank you !

Emmanuel.

Reply via email to