Re: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-03 Thread Viktor Dukhovni
On Tue, Oct 04, 2022 at 12:07:56AM +, Eddie Rowe wrote: > > What is the client TLS security level? > > I was using "may" and then "encrypt", but learned I should have been > using "verify" since this shows more information in the log files! :-) It's not that shows "more information" in the

RE: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-03 Thread Eddie Rowe
> Are you looking at the client or server logs? Is TLS certificate verification > configured on the client side, or just opportunistic unauthenticated TLS? I was looking at both side of logs, but only expecting the client to show TRUSTED. BTW, the link you shared on Forward Secrecy was great to

Re: symbolic links problem due to do-release-upgrade (postfix 3.6.4)

2022-10-03 Thread Viktor Dukhovni
On Mon, Oct 03, 2022 at 08:43:18PM +, Martin wrote: > yes, I'm afraid that's true, these are the contents of that old > directory (I renamed it and put a symbolic link to the sbin directory carrying > the current executables): > root@jerakeen:/usr/libexec/postfix/sbin.OLD# find . -type f -prin

Re: symbolic links problem due to do-release-upgrade (postfix 3.6.4) - was: manually build 3.7.2 denies SASL although included in make command

2022-10-03 Thread Wietse Venema
Martin: > HI Wietse, > > yes, I'm afraid that's true, these are the contents of that old > directory All those binaries have mail_version=3.4.13, therefore none will work Postfix 3.6 libraries. > I assume there has been a kind of new configuration between old postfix > version and the 3.6.4 one.

Re: symbolic links problem due to do-release-upgrade (postfix 3.6.4) - was: manually build 3.7.2 denies SASL although included in make command

2022-10-03 Thread Martin
HI Wietse, yes, I'm afraid that's true, these are the contents of that old directory (I renamed it and put a symbolic link to the sbin directory carrying the current executables): root@jerakeen:/usr/libexec/postfix/sbin.OLD# find . -type f -print | while read file; do echo -n "$file -> "; strin

Re: manually build 3.7.2 denies SASL although included in make command

2022-10-03 Thread Wietse Venema
Martin: > > > Hi there, > > I went back to the snapshot before trying to install postfix > from source, did an > apt-get install --reinstall postfix postfiy-mysql > > But still the master executable has an old version: > root@jerakeen:~# objdump -T /usr/libexec/postfix/master | grep > compat_

Re: manually build 3.7.2 denies SASL although included in make command

2022-10-03 Thread Martin
Hi there, I went back to the snapshot before trying to install postfix from source, did an apt-get install --reinstall postfix postfiy-mysql But still the master executable has an old version: root@jerakeen:~# objdump -T /usr/libexec/postfix/master | grep compat_level DO *UND