Re: CAfile problem with OpenSSL-1.1.1c

2019-08-14 Thread Christian Rößner
Hi Andreas, > Am 14.08.2019 um 10:01 schrieb A. Schulze : > > > Christian Rößner: > > Hello Christian, > >> By changing *_CAfile parameters to *_CApath, everything started working >> again. > > nothing specific to your OpenSSL version but: do you run postfix chroot? > from http://www.postfi

Re: CAfile problem with OpenSSL-1.1.1c

2019-08-14 Thread A. Schulze
Christian Rößner: Hello Christian, By changing *_CAfile parameters to *_CApath, everything started working again. nothing specific to your OpenSSL version but: do you run postfix chroot? from http://www.postfix.org/postconf.5.html#smtpd_tls_CApath: "To use smtpd_tls_CApath in chroot mo

CAfile problem with OpenSSL-1.1.1c

2019-08-14 Thread Christian Rößner
Hi, I recently upgraded my systems to have full openssl-1.1.1c support. After upgrading my mail-server, I realized that I had problems with trusting server certificates. I checked that the server still uses /etc/ssl/certs/ca-certificates.crt, but for some reason Postfix can not work with this