Sujet : Re: STS causes mail to be deferred
De : mm+usenet-es (at) *nospam* dorfdsl.de (Marco Moock)
Groupes : comp.mail.sendmailDate : 28. Dec 2024, 12:27:47
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <20241228122747.3519be13@ryz.dorfdsl.de>
References : 1 2 3 4 5
On 28.12.2024 01:08 Uhr Claus Aßmann wrote:
Now you need to fix your CACert* settings -- check what openssl
uses in case it is able to verify the server.
That pointed to the letsencrypt stuff and didn't include any other CAs
I now changed CACertPath to /etc/ssl/certs and now verification works
as intended. I dunno why I set that to the /etc/letsencrypt/live
folder in the past.
I now get the SAN error which is already discussed in the other thread.
BTW: doesn't M$ support DANE by now?
They support to check it in exchange, but for microsoft.com, no DNS
record exists yet.
-- kind regardsMarcoSend spam to 1735344526muell@stinkedores.dorfdsl.de