Re: Configuring postfix for outgoing SSL

2014-08-13 Thread Viktor Dukhovni
On Wed, Aug 13, 2014 at 02:09:41PM -0400, Alex wrote: > > > # openssl s_client -connect mail.example.com:465 > > > > You've not specified a CAfile or CApath. See s_client(1). > > Ah, I see. I thought supplying this on the server side in main.cf was the > proper way. I've supplied it on the opens

Re: Configuring postfix for outgoing SSL

2014-08-13 Thread Alex
Hi, > > I've enabled debug for my test host, and after restart postfix, I've tested > > it with the following openssl command: > > > > # openssl s_client -connect mail.example.com:465 > > You've not specified a CAfile or CApath. See s_client(1). Ah, I see. I thought supplying this on the server

Re: Configuring postfix for outgoing SSL

2014-08-12 Thread Viktor Dukhovni
On Tue, Aug 12, 2014 at 11:49:05PM -0400, Alex wrote: > I've enabled debug for my test host, and after restart postfix, I've tested > it with the following openssl command: > > # openssl s_client -connect mail.example.com:465 You've not specified a CAfile or CApath. See s_client(1). > It conne

Re: Configuring postfix for outgoing SSL

2014-08-12 Thread Alex
Hi, > > I only see information on smtpd_tls_wrapper_mode in TLS_README. Am I > > missing it? > > That's the one. http://www.postfix.org/TLS_README.html#server_enable > follow the instructions as written. Okay, I believe I have it working properly, but wanted to be sure, and also that my understa

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Viktor Dukhovni
On Mon, Aug 11, 2014 at 08:09:02PM -0400, Alex wrote: > > To support Outlook as an SSL/TLS submission client, you need to > > setup the smtps (input) wrapper-mode service as described in > > TLS_README. Outlook indeed does not support "TLS" (that is > > STARTTLS) and only supports SSL encapsulate

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Alex
Hi, > Let's talk about one thing at a time. What problem is your user > reporting? > > * An inability to use your server as a submission server, that is, > to use an MUA like Outlook with your server as its SMTP server? > > Or > > * An inability to route mail to some remote system via you

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Viktor Dukhovni
On Mon, Aug 11, 2014 at 06:25:50PM -0400, Alex wrote: > > Yes, though if you make SSL/TLS mandatory (via smtp_tls_policy_maps > > and the "encrypt" or "secure" levels) then some weaker ciphers are > > excluded by default. > > Okay, just to be sure I understand this correctly, I need to still > co

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Alex
Hi, > > I have a fedora20 system with postfix-2.10.3 and have TLS set up and > > working correctly, at least to the best of my ability. We have a user that > > would like to send email to a system that apparently doesn't support TLS, > > but does support SSL. I'd imagine they are referring to SSLv

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Noel Jones
On 8/11/2014 3:01 PM, Alex wrote: > Hi, > I have a fedora20 system with postfix-2.10.3 and have TLS set up and > working correctly, at least to the best of my ability. We have a > user that would like to send email to a system that apparently > doesn't support TLS, but does support SSL. I'd imagine

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread Viktor Dukhovni
On Mon, Aug 11, 2014 at 04:01:56PM -0400, Alex wrote: > I have a fedora20 system with postfix-2.10.3 and have TLS set up and > working correctly, at least to the best of my ability. We have a user that > would like to send email to a system that apparently doesn't support TLS, > but does support S

Re: Configuring postfix for outgoing SSL

2014-08-11 Thread li...@rhsoft.net
Am 11.08.2014 um 22:01 schrieb Alex: > I have a fedora20 system with postfix-2.10.3 and have TLS set up and working > correctly, at least to the best of my > ability. We have a user that would like to send email to a system that > apparently doesn't support TLS, but does > support SSL. I'd imag

Configuring postfix for outgoing SSL

2014-08-11 Thread Alex
Hi, I have a fedora20 system with postfix-2.10.3 and have TLS set up and working correctly, at least to the best of my ability. We have a user that would like to send email to a system that apparently doesn't support TLS, but does support SSL. I'd imagine they are referring to SSLv3. I'm not speci