OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: TLS Not Working With Self-Signed Certificates

From: Kirk Bocek (t004kbocek.com)
Date: Wed Apr 23 2008 - 13:04:30 CDT


Victor Duchovni wrote:
>> and TLS is *not* enabled for that connection.
>
> What makes you say that? I reach the opposite conclusion, TLS *is* used,
> because certificates were read, checked and found unverifiable, which
> can only happen when TLS *is* used.

Because nothing is logged regarding the TLS connection.

>> The message still goes
>> through of course. But I'd still like to get this working.
>
> What is it that you want working? Less verbose logging? Try:
>
> smtp_tls_loglevel = 0
>

At this point I have it at 2 so I can see what's going on.

When I enable TLS in Thunderbird, a bunch of messages are logged regard TLS.
However, after the 'self-signed certificate' messages I see nothing regarding
TLS. Am I misunderstanding normal postfix behavior? I assumed that the lack of
TLS messages meant the message was transferred in clear text.

Kirk Bocek