* Robert Chalmers (Author) <racu...@gmail.com>: > > I’m seeing this in my log file on outgoing test mail. Can’t seem to find a > solution. The mail does go through, but leaves this “Untrusted” message in > its wake. > > Jul 16 15:33:37 www postfix/587/smtp[35313]: Untrusted TLS connection > established to gmail-smtp-in.l.google.com[2a00:1450:400c:c08::1a]:25: TLSv1.2 > with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Use smtp_tls_CAFile and let it point to your local collection of trusted CAs. Then reload Postfix. You will begin to see 'trusted' connections. In order to also see 'verified' connections add DANE config to all outgoing mail (read: Postfix smtp-client). p@rick -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein