OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: TLS server to server

From: Rob Foehl (rwfloonybin.net)
Date: Wed Oct 01 2003 - 16:36:53 CDT


On Wed, 1 Oct 2003, Bill Swingle wrote:

> I have two mail servers doing primary and secondary MX respectivly for
> our domain. Both are configured to to do TLS and will happily do TLS
> with any server that wants to transfer mail via TLS *except* each other.
>
> The TLS configurations are identical on both servers:
>
> # TLS settings
> smtpd_tls_key_file = /usr/local/certs/postfix.key
> smtpd_tls_cert_file = /usr/local/certs/postfix.pem
> smtpd_use_tls = yes
>
> (they use different keys of course)
>
> I don't see any errors in the logs of either machine but when the
> secondary relays mail to the primary it's done without TLS.

smtpd_tls_* is not the same as smtp_tls_* ..

-Rob