Re: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-03 Thread Viktor Dukhovni
On Tue, Oct 04, 2022 at 12:07:56AM +, Eddie Rowe wrote: > > What is the client TLS security level? > > I was using "may" and then "encrypt", but learned I should have been > using "verify" since this shows more information in the log files! :-) It's not that shows "more information" in the

RE: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-03 Thread Eddie Rowe
> Are you looking at the client or server logs? Is TLS certificate verification > configured on the client side, or just opportunistic unauthenticated TLS? I was looking at both side of logs, but only expecting the client to show TRUSTED. BTW, the link you shared on Forward Secrecy was great to

Re: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-01 Thread Viktor Dukhovni
On Sat, Oct 01, 2022 at 09:59:28PM +, Eddie Rowe wrote: > > > I have an RSA wildcard certificate from GoDaddy that I am struggling > > > to get PostFix to use. > > > > What do you mean by "use"? > > I know Postfix does not have the code to handle TLS, Actually, though the low-level TLS code

RE: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-01 Thread Eddie Rowe
> > I have an RSA wildcard certificate from GoDaddy that I am struggling > > to get PostFix to use. > > What do you mean by "use"? I know Postfix does not have the code to handle TLS, but I assume there is some code to display info based on interactions with OpenSSL library that causes the log

Re: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-01 Thread Viktor Dukhovni
On Sat, Oct 01, 2022 at 07:25:55PM +, Eddie Rowe wrote: > I have an RSA wildcard certificate from GoDaddy that I am struggling > to get PostFix to use. What do you mean by "use"? > But when I point the Postfix null client at my test PostFix mail > gateway I see "Untrusted TLS connection esta

Re: TLS Setup Woes Untrusted/Anonymous GoDaddy Wildcard

2022-10-01 Thread Bill Cole
On 2022-10-01 at 15:25:55 UTC-0400 (Sat, 1 Oct 2022 19:25:55 +) Eddie Rowe is rumored to have said: I am working on setting up PostFix to banish another MTA so I have setup two virtual machines with one being a mail gateway and the other a null client using internal IPs for initial testing