On Sat, Oct 01, 2022 at 07:25:55PM +0000, Eddie Rowe wrote:
> I have an RSA wildcard certificate from GoDaddy that I am struggling
> to get PostFix to use.
What do you mean by "use"?
> But when I point the Postfix null client at my test PostFix mail
> gateway I see "Untrusted TLS connection established to..." on the null
> client and "Anonymous TLS connection established from..." on the
> gateway.
This is all fine. A TLS connection is established. What exactly were
you expecting:
https://www.postfix.org/FORWARD_SECRECY_README.html#status
> I have searched the list trying to see if there was a known issue with
> GoDaddy without finding anything specific to PostFix or wildcard
> certificates (GoDaddy would not be my choice in a registrar).
So far, I see no issue of any kind.
> Any suggestions on next steps to sort this out?
Do nothing. Everything is working.
> 3. I noticed there were "Bag Attributes" at the top of my wildcard
> certificate. I removed these without any change.
Harmless commentary outside the "----BEGIN...-----END" PEM delimiters.
Probably the cert and key were extract from a PKCS#12 container.
You appear to be spending lots of cycles chasing a non-problem.
What is your actual goal?
https://www.postfix.org/DEBUG_README.html#mail
https://www.postfix.org/DEBUG_README.html#logging
To report problems post configuration details and relevant logging,
verbatim, rather than out of context short fragments.
--
Viktor.