On 6/21/21 5:42 PM, naib+lists@xn--bimann-cta.de wrote:
> You wrote:
>> since the upgrade to 6.9 at the weekend opensmtpd complains
>> smtp cert-check result="no certificate presented"
>> for incoming EMails.
> Again, this is just a notification from the server, that no client
> certificates were sent in case of client tls authentication.
Wouldn't you agree that this message is misleading? The current
message doesn't tell whose certificate is missing. Instead, I
would suggest to write something like
peer did not authenticate via client certificate
into the log file.
> This
> has nothing to do with your second issue:
>> Diagnostic-Code: X-Postfix; TLS is required, but was not offered by host
>> mail.example.de
> I'd say that you can safely ignore the previous message.
>
> Instead, I'd suggest trying to debug OpenSMTPD with -dT all (or -dT
> transfer) and look at the output. If there is something wrong with
> your certs or config, it'll be shown there.
>
OK, I will check. Thanx very much for your help
Regards
Harri
No comments:
Post a Comment