I forget this SSL stuff so easily... I have a geotrust .csr, which I sent off to them awhile back, and got my mail.danga.com .crt from them ... and I have my mail.danga.com .key file.
But postfix/dovecot were only using the .crt and .key, as far as I can see. Why does qpsmtpd need the CA file? Isn't Geotrust in clients' default CA lists? On this Debian box, I see no Geotrust ca file in /etc/ssl/*, and I never got one from Geotrust... And I implemented SSL support in Perlbal and Djabberd, and never needed to ask users for their CAs ... why does qpsmtpd need it? I'm confused. - Brad
