OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Client certificates -- can I disconnect without any SMTP error message?

From: Alex Satrapa (alex.satrapaapf.edu.au)
Date: Wed Mar 29 2006 - 19:27:09 CST


On 30 Mar 2006, at 11:00, Rich Wales wrote:

> Right now, my submission server is sending an SMTP error
> message in this situation and refuses to recognize any SMTP
> commands except for QUIT

If you want to verify client certificates before passing the
connection on to Postfix, you might want to investigate stunnel:
http://www.stunnel.org/

Specifically, check the -v 3 option: verify client certificate
against known-trusted certificates stored on the server. Unvalidated
connections are disconnected before being forwarded to the un-
encrypted local service.