-------- Original Message --------
From: Viktor Dukhovni via Postfix-users [mailto:postfix-users@postfix.org]
Sent: Tuesday, May 2, 2023 at 11:32 AM EDT
To: postfix-users@postfix.org
Subject: [pfx] Re: inbound failures only from outbound.protection.outlook.com.
Cert issue in this log?
On Tue, May 02, 2023 at 11:09:59AM -0400, PGNet Dev wrote:
what root CA expiry are you referring to?
The DST root, that issued the ISRG X1 cross cert.
https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
yikes. missed that by a mile!
From my renewal.conf file:
[renewalparams]
reuse_key = True
preferred_chain = ISRG Root X1
...
and for acme,
https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain
i'll get this in place with the downstream, and see what it cures!
thx o/
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
