Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-09 Thread Thomas Quinot
* Wietse Venema, 2020-05-09 : > It was implemented in and removed from the un_stable Postfix release. Thanks for confirming this! > If you want to avoid incompatible changes, use a stable Postfix > release instead. Sure, that's perfectly fair, and I'm not complaining about the removal of the f

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
* Wietse Venema, 2020-05-08 : > > As far as I can tell, support for issuer and subject CN lookup > > was removed on 20200316. Is my understanding correct that support > > As far as I know it was never implemented. Sorry, I probably misunderstood the code while reading it. For the record, the cha

Re: check_ccert_access search order support (was: TLS client certificates and auth external)

2020-05-08 Thread Thomas Quinot
* Wietse Venema, 2019-05-18 : > smtpd_mumble_restrictions = > ... > check_ccert_access { > maptype:mapname, { search_order = cert_fingerprint, > pubkey_fingerprint, subject, issuer } > } > ... > > Where subject (or issuer) will search maptype:mapname for a match