Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread Viktor Dukhovni
On Thu, Feb 11, 2021 at 05:04:24PM +, bitozoid wrote: > > It can also contain intermediate CA certificates. Storing non-root CAs > > carries a risk that they may expire before you remove them, and then > > they may take precedence over non-expired intermediate CA certs that the > > remote pee

Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread bitozoid
On Thu, Feb 11, 2021 at 4:49 PM Viktor Dukhovni wrote: > > On Thu, Feb 11, 2021 at 02:51:02PM +, bitozoid wrote: > > > As of today, doc says for 'smtp_tls_CAfile': > > > > "A file containing CA certificates of root CAs trusted to sign either > > remote SMTP server certificates or intermediate

Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread Viktor Dukhovni
On Thu, Feb 11, 2021 at 02:51:02PM +, bitozoid wrote: > As of today, doc says for 'smtp_tls_CAfile': > > "A file containing CA certificates of root CAs trusted to sign either > remote SMTP server certificates or intermediate CA certificates." It can also contain intermediate CA certificates.

Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread Matus UHLAR - fantomas
On 11.02.21 14:51, bitozoid wrote: >As of today, doc says for 'smtp_tls_CAfile': > >"A file containing CA certificates of root CAs trusted to sign either >remote SMTP server certificates or intermediate CA certificates." > >and for 'smtp_tls_CApath': > >"Directory with PEM format Certification Aut

Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread bitozoid
On Thu, Feb 11, 2021 at 3:11 PM Matus UHLAR - fantomas wrote: > On 11.02.21 14:51, bitozoid wrote: > >As of today, doc says for 'smtp_tls_CAfile': > > > >"A file containing CA certificates of root CAs trusted to sign either > >remote SMTP server certificates or intermediate CA certificates." > >

Re: smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread Matus UHLAR - fantomas
On 11.02.21 14:51, bitozoid wrote: As of today, doc says for 'smtp_tls_CAfile': "A file containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates." and for 'smtp_tls_CApath': "Directory with PEM format Certification Authority

smtp_tls_CAfile and smtp_tls_CApath doc

2021-02-11 Thread bitozoid
As of today, doc says for 'smtp_tls_CAfile': "A file containing CA certificates of root CAs trusted to sign either remote SMTP server certificates or intermediate CA certificates." and for 'smtp_tls_CApath': "Directory with PEM format Certification Authority certificates that the Postfix SMTP cl