Re: TLS client certs question

Wietse Venema: > Chris Bamford: > > Thanks guys. I'd like to know about both sender and recipient domain. > > You want the Postfix SMTP client to use a customer-specific client > certificate when it delivers email: > > - FROM that customer domain (i.e. customer domain = sender domain) > > - TO t

Re: TLS client certs question

Chris Bamford: > Thanks guys. I'd like to know about both sender and recipient domain. You want the Postfix SMTP client to use a customer-specific client certificate when it delivers email: - FROM that customer domain (i.e. customer domain = sender domain) - TO that customer domain (i.e. the cus

Re: TLS client certs question

> On 9 Aug 2021, at 11:42 am, Chris Bamford wrote: > > Thanks guys. I'd like to know about both sender and recipient domain. Are you asking a question??? That's much too short to mean anything to anyone but you... -- Viktor.

Re: TLS client certs question

Thanks guys. I'd like to know about both sender and recipient domain. Chris On Aug 8, 2021, 18:30, at 18:30, Wietse Venema wrote: >Viktor Dukhovni: >> On Sun, Aug 08, 2021 at 10:50:48AM -0400, Wietse Venema wrote: >> >> > I suppose that each client certificate will be valid only with a >> > spec

Re: TLS client certs question

Viktor Dukhovni: > On Sun, Aug 08, 2021 at 10:50:48AM -0400, Wietse Venema wrote: > > > I suppose that each client certificate will be valid only with a > > specific host, so you would have to update the sender_transport > > table to return a transport:nexthop result. > > FWIW, the OP's question

Re: TLS client certs question

On Sun, Aug 08, 2021 at 10:50:48AM -0400, Wietse Venema wrote: > I suppose that each client certificate will be valid only with a > specific host, so you would have to update the sender_transport > table to return a transport:nexthop result. FWIW, the OP's question was: Is it possible to con

Re: TLS client certs question

Wietse Venema: > Chris Bamford: > > Hello, > > > > I would like to know how Postfix handles client certificates for delivery > > i.e. when it makes a remote connection to deliver email. > > > > Is it possible to control the certificate that is used per domain? > > The client certificate is a Pos

Re: TLS client certs question

Thanks Wietse, I missed this first time, this must be the walkthrough that Viktor mentioned. Very useful, I will take a closer look on Monday. Best, Chris On Aug 7, 2021, 15:19, at 15:19, Wietse Venema wrote: >Chris Bamford: >> Hello, >> >> I would like to know how Postfix handles client certi

Re: TLS client certs question

Thanks Viktor, That's good to know. Where can I find this walkthrough? Chris On Aug 7, 2021, 17:25, at 17:25, Viktor Dukhovni wrote: >On Sat, Aug 07, 2021 at 11:10:39AM +0100, Chris Bamford wrote: > >> I would like to know how Postfix handles client certificates for >delivery >> i.e. when it m

Re: TLS client certs question

On Sat, Aug 07, 2021 at 11:10:39AM +0100, Chris Bamford wrote: > I would like to know how Postfix handles client certificates for delivery > i.e. when it makes a remote connection to deliver email. > > Is it possible to control the certificate that is used per domain? Wietse posted a detailed wa

Re: TLS client certs question

Chris Bamford: > Hello, > > I would like to know how Postfix handles client certificates for delivery > i.e. when it makes a remote connection to deliver email. > > Is it possible to control the certificate that is used per domain? The client certificate is a Postfix SMTP client setting; the cer

TLS client certs question

Hello, I would like to know how Postfix handles client certificates for delivery i.e. when it makes a remote connection to deliver email. Is it possible to control the certificate that is used per domain? Thanks, - Chris