Re: TLS client certificate

2014-08-22 Thread Christian Rößner
s a fix, > although I'm only able to describe how to find it in the US English version > of Mail. I hope this provides adequate clues. Thank you, you really helped me to solve it. > In "Account Information" you can use the "TLS Certificate" pull-down to > select

Re: TLS client certificate

2014-08-22 Thread Bill Cole
t;Account Information" you can use the "TLS Certificate" pull-down to select your personal certificate. You also will need to switch to the "Advanced" tab to switch "Authentication" from "External (TLS Client Certificate)" to "None" (if you h

Re: TLS client certificate

2014-08-22 Thread Christian Rößner
>> Aug 22 19:14:10 mx0 postfix-submission/smtpd[29528]: Anonymous TLS >> connection established from >> static-201-106.deltasurf.de[193.239.106.201]:47064: TLSv1 with cipher >> ECDHE-RSA-AES256-SHA (256/256 bits) > > Your server SASL layer did not offer a SASL "EXTERNAL" mechanism, > and probab

Re: TLS client certificate

2014-08-22 Thread Viktor Dukhovni
tablished from static-201-106.deltasurf.de[193.239.106.201]:40001: TLSv1 > with cipher ECDHE-RSA-AES256-SHA (256/256 bits) No certificate sent, so Apple Mail is not configured to employ a TLS client certificate, and may not support that feature. > Aug 22 19:14:10 mx0 postfix-submission/smtpd[29528]: Ano

Re: TLS client certificate

2014-08-22 Thread Christian Rößner
n certificate? Or a TLS > client certificate? What is its purpose? It is a client certificate and I want to send mail without password usage. > Do always post relevant details from the Postfix logs when reporting > Postfix problems. Here is a log with Thunderbird: Aug 22 19:00:47 m

Re: TLS client certificate

2014-08-22 Thread Viktor Dukhovni
E email signing/encryption certificate? Or a TLS client certificate? What is its purpose? Do always post relevant details from the Postfix logs when reporting Postfix problems. > 1.) Thunderbird > > I imported the same p12 file in Thunderbird. Did a test mail and > a dialog asked me to use

Re: TLS client certificate

2014-08-22 Thread Wietse Venema
> 1.) Thunderbird (works) > 2.) Apple Mail (fails) Without going into details, you need to check that the two above use the same Postfix SMTP server address and port (25 or 587), otherwise the comparison will not be valid. Wietse

TLS client certificate

2014-08-22 Thread Christian Rößner
Hi, I hope my question is not off topic. I try to create a self signed certificate, which is signed by my own CA. I have created a pkcs12 file, which includes cert, key, and CA: openssl pkcs12 -export -in newcert.pem -inkey newkey.pem -CAfile cacert.pem -chain -out croessner.p12 I have import

Re: TLS Client certificate expiry?

2010-05-16 Thread Victor Duchovni
On Sun, May 16, 2010 at 12:52:56AM +0200, Hadmut Danisch wrote: > So relaying and using local domains as sender domains is restricted > with permit_mynetworks, permit_tls_clientcerts, permit_sasl_authenticated. > Works as expected. There is a difference between "permit_tls_clientcerts" and "perm

Re: TLS Client certificate expiry?

2010-05-16 Thread zhong ming wu
On Sun, May 16, 2010 at 6:03 AM, Hadmut Danisch wrote: > On 16.05.2010 01:24, zhong ming wu wrote: >> On Sat, May 15, 2010 at 6:52 PM, Hadmut Danisch wrote: >>> I am running a postfix server which allows relaying and using particular >>> sender domains for some people, but not for the public. The

Re: TLS Client certificate expiry?

2010-05-15 Thread Hadmut Danisch
..btw., using postfix 2.6.5-3 (debian)

TLS Client certificate expiry?

2010-05-15 Thread Hadmut Danisch
Hi, just a configuration/security question: I am running a postfix server which allows relaying and using particular sender domains for some people, but not for the public. The authorised users have to authnticate either with SASL or TLS client certificates. Since the server works also as a recip