From: Maple Thorpe (maplethorpecox.net)
Date: Thu Apr 24 2008 - 16:40:50 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

What a relief. I read TLS_README.html seems like a hundred times and
each time read 'client' fingerprint somehow.

On Thu, 2008-04-24 at 18:24 -0400, Victor Duchovni wrote:
> On Thu, Apr 24, 2008 at 05:19:04PM -0400, Maple Thorpe wrote:
>
> > Sorry, I didn't explain it well, SMTP client's messages are rejected.
> >
> > ===================
> > (Gobot) SMTP Server Log
> > ===================
> > Apr 24 15:08:43 gobot postfix/error[7098]: 59ADEC29C:
> > to=<Lennaertwebmail.webservers.com>, relay=none, delay=299,
> > delays=299/0.03/0/0.02, dsn=4.7.5, status=deferred (delivery temporarily
> > suspended: Server certificate not verified)
>
> No, the server is not rejecting the client, the client is rejecting the
> server because the client's check of the server cert fails. Not surprisingly,
> as your fingerprint match in the client is looking for the client's own
> cert fingerprint, not the server's. Your verbose logging is on the wrong
> side, the server is happy with the client, the client is unhappy with the
> server.
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]