On Thu, Jul 10, 2008 at 3:33 PM, Will Maier <willmaier@ml1.net> wrote:

quoted text
> On Thu, Jul 10, 2008 at 02:08:30PM +0200, GVG GVG wrote:
> [...]
> > did try to setup STARTTLS but I don't think that it works! here are the
> > modifications in my .mc file:
> >
> > ----------------------
> > define(`CERT_DIR', `MAIL_SETTINGS_DIR`'CA')dnl
> > define(`confCACERT_PATH', `CERT_DIR')dnl
> > define(`confCACERT', `CERT_DIR/cacert.pem')dnl
> > define(`confSERVER_CERT', `CERT_DIR/cert.pem')dnl
> > define(`confSERVER_KEY', `CERT_DIR/key.pem')dnl
> > define(`confCLIENT_CERT', `CERT_DIR/mycert.pem')dnl
> > define(`confCLIENT_KEY', `CERT_DIR/mykey.pem')dnl
> > ---------------------
>
> Do those files exist?
>
> > Following 'man starttls' I should get:
> [...]
> > but I'm missing the '250 STARTTLS' entry from the above output!
> >
> > Any idea what might gone wrong?
>
> Did you look in your maillogs?
>
> --
>
> o--------------------------{ Will Maier }--------------------------o
> | web:.......http://www.lfod.us/ | email.........willmaier@ml1.net |
> *---------------------[ BSD: Live Free or Die ]--------------------*
>
>
Yes they do exist:

------------------------------
-bash-3.2$ pwd
/etc/mail/CA
-bash-3.2$ ls -l
total 56
-rw-r--r--  1 root  wheel  1229 Jun 23 17:02 cacert.pem
-rw-r--r--  1 root  wheel   875 Jun 18 13:46 cacert.pm
-rw-------  1 root  wheel  3848 Jun 23 17:11 cert.pem
drwxr-xr-x  2 root  wheel   512 Jun 17 16:25 certs
drwxr-xr-x  2 root  wheel   512 Jun 23 17:17 crl
-rw-------  1 root  wheel     3 Jun 23 17:17 crlnumber
-rw-------  1 root  wheel    68 Jun 23 17:11 index.txt
-rw-------  1 root  wheel    21 Jun 23 17:11 index.txt.attr
-rw-r--r--  1 root  wheel     0 Jun 23 16:46 index.txt.old
-rw-r--r--  1 root  wheel  1679 Jun 23 17:04 key.pem
drwxr-xr-x  2 root  wheel   512 Jun 23 17:11 newcerts
drwx------  2 root  wheel   512 Jun 23 16:53 private
-rw-------  1 root  wheel     3 Jun 23 17:11 serial
-rw-r--r--  1 root  wheel     3 Jun 23 16:46 serial.old
-------------------

and in the mail_log there is nothing recorded! No errors or warnings!

Thanks

George