Re: verification levels and Milter (solved)

2017-07-31 Thread A. Schulze
Am 31.07.2017 um 20:43 schrieb A. Schulze: > seeing cert_subject + cert_issuer inside a milter may be an indicator of > "trusted connection" > and report my findings ... as Viktor said: a milter get issuer and subject only for connections SMTPD also log as "trusted" On untrusted and anonymous

Re: verification levels and Milter

2017-07-31 Thread A. Schulze
Am 31.07.2017 um 20:16 schrieb Wietse Venema: > I looked at the code for the cleanup daemon which is TLS unaware. > So the corrected reply would be that we may have partial support. Hello, thanks to all. I'll give Viktor's point a try: seeing cert_subject + cert_issuer inside a milter may be a

Re: verification levels and Milter

2017-07-31 Thread Wietse Venema
Viktor Dukhovni: > > > On Jul 31, 2017, at 10:55 AM, Wietse Venema wrote: > > > > Postfix does not implement TLS-related Milter macros. That would > > require some new code. Currently, the cleanup daemon does not know > > anything about TLS, so getting that info from the smtpd(8) process > > wou

Re: verification levels and Milter

2017-07-31 Thread Viktor Dukhovni
> On Jul 31, 2017, at 12:08 PM, Claus Assmann > wrote: > > On Mon, Jul 31, 2017, Viktor Dukhovni wrote: > >> I don't know what milters expect to find in "{cert_issuer}" and >> "{cert_subject}". The CN or the full DN (and if so in what >> encoding). We provide CNs, but perhaps Sendmail provid

Re: verification levels and Milter

2017-07-31 Thread Claus Assmann
On Mon, Jul 31, 2017, Viktor Dukhovni wrote: > I don't know what milters expect to find in "{cert_issuer}" and > "{cert_subject}". The CN or the full DN (and if so in what > encoding). We provide CNs, but perhaps Sendmail provides > DNs? It's in the fine documentation (op.*) ${cert_issue

Re: verification levels and Milter

2017-07-31 Thread Viktor Dukhovni
> On Jul 31, 2017, at 10:55 AM, Wietse Venema wrote: > > Postfix does not implement TLS-related Milter macros. That would > require some new code. Currently, the cleanup daemon does not know > anything about TLS, so getting that info from the smtpd(8) process > would also require some new code.

Re: verification levels and Milter

2017-07-31 Thread Viktor Dukhovni
> On Jul 31, 2017, at 9:06 AM, A. Schulze wrote: > > Postfix smtp server may classify incoming TLS sessions as anonymous, > untrusted and trusted. > (http://www.postfix.org/FORWARD_SECRECY_README.html#status) > > Is it possible to access this information from within a milter? Some TLS informa

Re: verification levels and Milter

2017-07-31 Thread Wietse Venema
A. Schulze: > Hello, > > postfix smtp server may classify incoming TLS sessions as anonymous, > untrusted and trusted. > (http://www.postfix.org/FORWARD_SECRECY_README.html#status) > > Is it possible to access this information from within a milter? > > I did not found such funktionallity on >

verification levels and Milter

2017-07-31 Thread A. Schulze
Hello, postfix smtp server may classify incoming TLS sessions as anonymous, untrusted and trusted. (http://www.postfix.org/FORWARD_SECRECY_README.html#status) Is it possible to access this information from within a milter? I did not found such funktionallity on http://www.postfix.org/MILTER_RE