Hello!

Has someone client authentication via ssl certificates using tls.patch
working?

Everything works fine but the server always rejects the other (qmail)
node that tries to relay. He says "no valid cert for gatewaying".

I've debugged qmail-smtpd and found that he bails out in
SSL_get_peer_certificate.

The client has a certificate I signed using an own certificate that I
create once. I've put this issueing certificate into
control/clientca.pem (along with the list of the official ones).

Any hints?

BTW: If someone is interested. I wrote a patch to fixcrio so that it
will recognize TLS handshake and shop inserting CRs.

Ciao, Chtephan!


Reply via email to