Sendmail [was OpenSSL]

James Kosin jkosin at beta.intcomgrp.com
Wed Jul 14 16:12:51 UTC 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alexander Dalloz wrote:

<<--snip-->>

|
| James,
|
| when Sendmail reports that problem in the maillog, then the CA cert is
| not there or has wrong permissions. Please post your sendmail.mc entries
| for the certificates, to see the names and locations you chose. And post
| the output of "ls -al /path/to/certificates".
|
| Alexander
|
|
|

[root at beta mail]# ls -al /usr/share/ssl/certs
total 284
drwxr-xr-x  2 root root   4096 Jul 13 16:06 .
drwxr-xr-x  7 root root   4096 Jul 13 10:13 ..
- -rw-r--r--  1 root root 249373 Mar 17 18:35 ca-bundle.crt
- -rw-------  1 root root   1464 Jan  2  2004 dovecot.pem
- -rw-------  1 root root   2352 Jan  2  2004 imapd.pem
- -rw-------  1 root root   2336 Jul 13 10:14 ipop3d.pem
- -rw-r--r--  1 root root    610 Mar 17 18:35 make-dummy-cert
- -rw-r--r--  1 root root   1832 Mar 17 18:35 Makefile
- -rw-------  1 root root   2336 Jul 13 10:14 sendmail.pem
- -rw-r-----  1 root ldap   2352 Jan  2  2004 slapd.pem
[root at beta mail]#


in sendmail.mc

dnl #
dnl # Rudimentary information on creating certificates for sendmail TLS:
dnl #     make -C /usr/share/ssl/certs usage
dnl #
define(`confCACERT_PATH',`/usr/share/ssl/certs')
define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')
dnl #

Thanks,
James
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA9VuDc7lFLjBWKW0RAgp6AJ4vMX5lOr5eLXg3B9BCaIP4sBZbUwCfUWKK
Q/qL+hixrswh2qoGlGUdOU8=
=WR1j
-----END PGP SIGNATURE-----





More information about the fedora-list mailing list