On startup, sendmail service complains:
Jun 9 11:07:23 e7 sendmail[4117369]: starting daemon (8.18.2): SMTP+queueing@01:00:00 Jun 9 11:07:23 e7 sendmail[4117369]: STARTTLS=server: file /etc/pki/tls/certs/ca-bundle.crt unsafe: No such file or directory sendmail log shows messages like this whenever mail is sent through tip.net.au which requires TLS Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client: file /etc/pki/tls/certs/ca-bundle.crt unsafe: No such file or directory Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client, error: load verify locs /etc/pki/tls/certs, /etc/pki/tls/certs/ca-bundle.crt failed: 0 Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client, relay=mx1.tip.net.au., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256 The mail is still accepted and delivered What is the correct way to create the missing ca-bundle.crt file? Or is it a misconfigured sendmail? I note that with the f44 upgrade I received a new sendmail.cf.rpmnew but no sendmail.mc, which I need to adjust. sendmail.mc contains these lines: define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl define(`confSERVER_KEY', `/etc/pki/tls/private/sendmail.key')dnl The above confCACERT file does not exist. 'dnf provides' finds no source for this file. In which case what is the correct way to fix the configuration? Checked the current package (sendmail-8.18.2-2.fc44.x86_64.rpm) and it has the same files nominated. TIA -- Eyal at Home ([email protected]) -- _______________________________________________ users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
