* Robert Chalmers (Author) <racu...@gmail.com>:
> 
> I’m seeing this in my log file on outgoing test mail. Can’t seem to find a 
> solution. The mail does go through, but leaves this “Untrusted” message in 
> its wake.
> 
> Jul 16 15:33:37 www postfix/587/smtp[35313]: Untrusted TLS connection 
> established to gmail-smtp-in.l.google.com[2a00:1450:400c:c08::1a]:25: TLSv1.2 
> with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)

Use smtp_tls_CAFile and let it point to your local collection of trusted CAs.
Then reload Postfix. You will begin to see 'trusted' connections. In order to
also see 'verified' connections add DANE config to all outgoing mail (read:
Postfix smtp-client).

p@rick


-- 
[*] sys4 AG

https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein

Reply via email to