Re: TLS whoes

2015-03-02 Thread Paul
Viktor Thank you for your response which clarifies all my concerns. Paul On 02/03/2015 22:05, Viktor Dukhovni wrote: On Mon, Mar 02, 2015 at 08:40:17PM +, Paul wrote: I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted mail. I have enabled outgoing TLS support

Re: TLS whoes

2015-03-02 Thread Viktor Dukhovni
On Mon, Mar 02, 2015 at 08:40:17PM +, Paul wrote: > I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted > mail. I have enabled outgoing TLS support It seems to be working just fine. http://permalink.gmane.org/gmane.mail.postfix.user/249429 http://permalink.gma

Re: TLS whoes

2015-03-02 Thread Paul
On 02/03/2015 21:19, Wietse Venema wrote: Paul: root@rowan:/etc/postfix# posttls-finger -F You should never run this test as root, if only because the Postfix SMTP client does not run as root. If that does not explain the difference, try turning off chroot in master.cf: # service type priv

Re: TLS whoes

2015-03-02 Thread Wietse Venema
Paul: > root@rowan:/etc/postfix# posttls-finger -F You should never run this test as root, if only because the Postfix SMTP client does not run as root. If that does not explain the difference, try turning off chroot in master.cf: # service type private unpriv chroot wakeup maxproc command

TLS whoes

2015-03-02 Thread Paul
Hi list I have a Ubuntu Postfix (2.11) setup which only delivers locally submitted mail. I have enabled outgoing TLS support root@rowan:/etc/postfix# postconf -n | grep tls smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_loglevel = 1 smtp_tls_note_starttls_offer = yes smtp_tls_se