Re: bendel.debian.org untrusted certificate

2023-03-12 Thread Alexander V. Makartsev
On 12.03.2023 09:55, jeremy ardley wrote: Back on topic I have solved getting letsencrypt certificates accepted by postfix , but not certificates generated by Debian SMTP CA Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread Michel Verdier
Le 12 mars 2023 Jeremy Ardley a écrit : > Slightly off topic I found these files. They seem to not be used as they > aren't links to /usr/share/ca-certificates/mozilla/* [...] > > is it safe to remove them? You can do c_rehash /etc/ssl/certs/ to clean hash links (*.0 and *.1 files) snakeoil is t

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread jeremy ardley
On 12/3/23 12:50, Jeremy Ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread Jeremy Ardley
On 12/3/23 12:29, Jeremy Ardley wrote: On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)   

Re: bendel.debian.org untrusted certificate

2023-03-11 Thread Jeremy Ardley
On 12/3/23 08:48, jeremy ardley wrote: Received: from edge.bronzemail.com (2403-5800-c000-1b7-f3d4-d970-ca28-bf4f.ip6.aussiebb.net [IPv6:2403:5800:c000:1b7:f3d4:d970:ca28:bf4f]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature R

bendel.debian.org untrusted certificate

2023-03-11 Thread jeremy ardley
Examining incoming connections I see that google is trusted but bendel.debian.org (this list) is not Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: setting up TLS connection from bendel.debian.org[82.195.75.100] Mar 12 08:37:39 egde postfix/25pass/smtpd[78299]: Untrusted TLS connection esta