Re: TLS for dummies

2010-08-26 Thread Jerry
On Wed, 25 Aug 2010 16:47:46 -0700 Security Admin (NetSec) articulated: > > smtp_tls_CAfile = /etc/postfix/exchange.pem > > >>You can list more CAs in this file if you wish. > > Is there an existing file or a weblink that would list the current > accepted global root CAs? Since the only one in

Re: TLS for dummies

2010-08-25 Thread Eray Aslan
On 26.08.2010 02:47, Security Admin (NetSec) wrote: > Is there an existing file or a weblink that would list the current accepted > global root CAs? Since the only one in the "exchange.pem" file is from my > Exchange Server, I could append to this file all the necessary trusted root > CAs. Don

RE: TLS for dummies

2010-08-25 Thread Security Admin (NetSec)
> smtp_tls_CAfile = /etc/postfix/exchange.pem >>You can list more CAs in this file if you wish. Is there an existing file or a weblink that would list the current accepted global root CAs? Since the only one in the "exchange.pem" file is from my Exchange Server, I could append to this file all

Re: TLS for dummies

2010-08-25 Thread Victor Duchovni
On Wed, Aug 25, 2010 at 05:59:10AM -0700, Security Admin (NetSec) wrote: > "postfix/smtp[28338]: certificate verification failed > for mail.x.org[xxx.xxx.xxx.xxx]:25: untrusted issuer > /C=US/O=Entrust.net/OU=www.entrust.net/CPS incorp. by ref. (limits > liab.)/OU=(c) 1999 Entrust.net Limited/

Re: TLS for dummies

2010-08-25 Thread Jeroen Geilman
On 08/25/2010 02:59 PM, Security Admin (NetSec) wrote: This is more of an annoyance than anything else. When my Postfix (v 2.6.7) attempts to send a message via TLS the following warning is received: "postfix/smtp[28338]: certificate verification failed for mail.x.org[xxx.xxx.xxx.xxx]: