[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-15 Thread Matthew J Black via Postfix-users
On 15/5/25 00:20, Jaroslaw Rafa via Postfix-users wrote: Dnia 14.05.2025 o godz. 20:37:40 Matthew J Black via Postfix-users pisze: - as you are no doubt aware, I had an "interesting" situation where my email were being turned into html by a service I am no-longer using. Hopefully

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-14 Thread Matthew J Black via Postfix-users
ic recreation of the relevant sni map file with the new/renewed LE Certificates.Thank you all - issue(s) resolved, thread (can be) closed.On 14/5/25 15:33, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 01:36:09AM +1000, Matthew J Black via Postfix-users wrote:>>> But what d

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
Cool - that's what I get But what do you get with 'openssl s_client -starttls smtp -connect mail.peregrineit.net:587' - cause I get : depth=0 CN=peregrineit.net verify error:num=10:certificate has expired notAfter=Apr 10 07:36:42 2025 GMT I'll post in a few hours On 14/5/25 01:20, Viktor Duk

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 00:08, Matus UHLAR - fantomas via Postfix-users wrote:>> are you sure the proper smtpd_tls_cert_file and smtpd_tls_key_file are > configured in postfix configuration?>Triple-checked it  :-)And as I said, I can't find the old certs on the box anywhere, so even if they were incorrectly set

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
gt; are>>   >> > configured in postfix configuration?>>>   > On Wed, May 14, 2025 at 12:17:29AM +1000, Matthew J Black via>>   Postfix-users wrote:>>   >>>   >> Triple-checked it :-)>>   >> And as I said, I can't find the old certs

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 01:12, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 12:56:34AM +1000, Matthew J Black via Postfix-users wrote:>>>> There's no magic, Postfix loads certificates and keys from the>>> configured locations.>>>>>> https://w

[pfx] Re: Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
On 14/5/25 00:48, Viktor Dukhovni via Postfix-users wrote:> On Wed, May 14, 2025 at 12:17:29AM +1000, Matthew J Black via Postfix-users wrote:>>> [q2AY6ESDEdxdcaKPIjGrwB1r7irZNrS9NMjjOyd3RyDvDnZMS2-sTQhrV

[pfx] Postfix Not Refreshing TLS Certs Even After Reboot

2025-05-13 Thread Matthew J Black via Postfix-users
Hi All,This is really weird - Our Postfix server is presenting old/expired LE TLS Certs, even though we've updated the certs AND restarted Postfix (and Dovecot) (and even rebooted the server) multiple times.I've done a thorough search of the box for the old certs and can find nothing.I've done a th

[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread Matthew J Black via Postfix-users
On 25/2/25 02:40, Wietse Venema via Postfix-users wrote: Matthew J Black via Postfix-users: Hi Wietse, Thanks for getting back to me. 1) Its a connection to port 25587; a substitute for 587 (see (2) below) Maybe your getaddrinfo() implementation does not want to convert a numerical port to

[pfx] Re: Help In Interpreting Postfix Log Entry - Please

2025-02-24 Thread Matthew J Black via Postfix-users
Hi Wietse, Thanks for getting back to me. 1) Its a connection to port 25587; a substitute for 587 (see (2) below) 2) Its behind a haproxy box, which in turn is behind a NAT router. I haven't implemented postfix (yet) 3) inet_protocols = ipv4 Relevant line from mastr.conf: 25587   inet

[pfx] Re: No Permissions To TLS Certificates

2023-10-12 Thread Matthew J Black via Postfix-users
On 12/10/2023 23:19, Wietse Venema via Postfix-users wrote: If the 'find' command cannot enumerate mode 755 directories, then this is no longer a problem that receives Postfix support. Turning off SeLinux is easy. Wietse Thanks for getting back to me. Yes, turning off SELinux is eas

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Matthew J Black via Postfix-users
Thanks Étienne, So what's the difference between a MAriaDB Client file and the various "tls_" settings in the connection.cf file (ie see MYSQL_TABLE(5):https://www.postfix.org/mysql_table.5.html )? Hi! From MariaDB 10.5.2, the require_secure_transport system variable is available. When s

[pfx] postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Matthew J Black via Postfix-users
Hi All, Got a funny one: Using Postfix 3.8.1 connecting to a MariaDB backend - everything is working AOK. I can get the correct response when I do a `postmap -q my_example.com mysql:/etc/postfix/virtual_domains.cf` - as I said, everything is working AOK. However, when I turn on 1-way TLS