TLS with openssl 0.9.8m

2010-03-14 Thread Richard van den Berg
Is anyone here successfully using self signed server certificates in combination with openssl 0.9.8m ? I just upgraded from 0.9.8k and I am getting these errors whenever a starttls is received: Mar 14 08:47:04 majoron postfix/smtpd[31776]: SSL_accept:error in SSLv3 read client certificate A Ma

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 15-3-10 16:49 , Quanah Gibson-Mount wrote: We use self-signed certs with Postfix, and StartTLS on port 25 works just fine. Postfix is linked against OpenSSL 0.9.8m for us. Is the signature algorithm of your cert sha256WithRSAEncryption ? It looks like there is a bug in postfix where th

Re: TLS with openssl 0.9.8m

2010-03-22 Thread Richard van den Berg
On 22-3-10 22:06 , Richard van den Berg wrote: Apparently postfix does not call SSL_library_init() / OpenSSL_add_ssl_algorithms(), see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573748 and http://marc.info/?l=openssl-dev&m=126925010314573&w=2 Correction: postfix does