Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 04:53:22PM +, Viktor Dukhovni wrote: > On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > > > > What version of Postfix are you using? > > > > postfix/master[7500]: reload -- version 2.6.6, configuration /etc/postfix > > That's nearly seven years old. Wh

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 07:56:15PM +0300, Michael Peter wrote: > Just for info, How can i know the default locations for default system > certificates which postfix drag when setting smtp_tls_CAfile ? This is system-dependent: $ openssl version -d OPENSSLDIR: "/usr/pkg/etc/openssl" Look

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > >> > What version of Postfix are you using? >> >> postfix/master[7500]: reload -- version 2.6.6, configuration >> /etc/postfix > > That's nearly seven years old. When you enable the Web PKI by > setting smtp_tls_CAfile, that versio

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > > What version of Postfix are you using? > > postfix/master[7500]: reload -- version 2.6.6, configuration /etc/postfix That's nearly seven years old. When you enable the Web PKI by setting smtp_tls_CAfile, that version of Postfix w

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> On Fri, Sep 25, 2015 at 06:16:10PM +0300, Michael Peter wrote: > >> I have configured postfix to check CAfile which contains only Godaddy >> root >> certificate as follow for outgoing emails. >> >> smtp_tls_CAfile = /etc/certs/go-daddy-root-ca.crt > > Which certificates are in that file? Report

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 03:40:17PM +, Viktor Dukhovni wrote: > What version of Postfix are you using? Note that in Postfix prior to 2.8, setting a non-empty CAfile causes the default system certificate store to also be enabled. -- Viktor.

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Viktor Dukhovni
On Fri, Sep 25, 2015 at 06:16:10PM +0300, Michael Peter wrote: > I have configured postfix to check CAfile which contains only Godaddy root > certificate as follow for outgoing emails. > > smtp_tls_CAfile = /etc/certs/go-daddy-root-ca.crt Which certificates are in that file? Report the output o

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Michael Peter
> Michael Peter: >> This makes me more confused.. >> Please advise your opinion.. > Please post your configration as requested in the welcome message. > wietse I have posted my configuration as per your request.. and i summarize my questions again as follow I have configured postfix to chec

Re: Question about smtp_tls_CAfile

2015-09-25 Thread Wietse Venema
Michael Peter: > This makes me more confused.. > > Please advise your opinion.. Please post your configration as requested in the welcome message. wietse TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html Thank