On Thu, Jul 10, 2008 at 4:12 PM, Will Maier <willmaier@ml1.net> wrote:

quoted text
> On Thu, Jul 10, 2008 at 03:56:48PM +0200, GVG GVG wrote:
> > On Thu, Jul 10, 2008 at 3:33 PM, Will Maier <willmaier@ml1.net> wrote:
> > > On Thu, Jul 10, 2008 at 02:08:30PM +0200, GVG GVG wrote:
> > > > ----------------------
> > > > define(`CERT_DIR', `MAIL_SETTINGS_DIR`'CA')dnl
> > > > define(`confCACERT_PATH', `CERT_DIR')dnl
> > > > define(`confCACERT', `CERT_DIR/cacert.pem')dnl
> > > > define(`confSERVER_CERT', `CERT_DIR/cert.pem')dnl
> > > > define(`confSERVER_KEY', `CERT_DIR/key.pem')dnl
> > > > define(`confCLIENT_CERT', `CERT_DIR/mycert.pem')dnl
> > > > define(`confCLIENT_KEY', `CERT_DIR/mykey.pem')dnl
> > > > ---------------------
> [...]
> > Yes they do exist:
> >
> > ------------------------------
> > -bash-3.2$ pwd
> > /etc/mail/CA
> > -bash-3.2$ ls -l
> > total 56
> > -rw-r--r--  1 root  wheel  1229 Jun 23 17:02 cacert.pem
> > -rw-r--r--  1 root  wheel   875 Jun 18 13:46 cacert.pm
> > -rw-------  1 root  wheel  3848 Jun 23 17:11 cert.pem
> > drwxr-xr-x  2 root  wheel   512 Jun 17 16:25 certs
> > drwxr-xr-x  2 root  wheel   512 Jun 23 17:17 crl
> > -rw-------  1 root  wheel     3 Jun 23 17:17 crlnumber
> > -rw-------  1 root  wheel    68 Jun 23 17:11 index.txt
> > -rw-------  1 root  wheel    21 Jun 23 17:11 index.txt.attr
> > -rw-r--r--  1 root  wheel     0 Jun 23 16:46 index.txt.old
> > -rw-r--r--  1 root  wheel  1679 Jun 23 17:04 key.pem
> > drwxr-xr-x  2 root  wheel   512 Jun 23 17:11 newcerts
> > drwx------  2 root  wheel   512 Jun 23 16:53 private
> > -rw-------  1 root  wheel     3 Jun 23 17:11 serial
> > -rw-r--r--  1 root  wheel     3 Jun 23 16:46 serial.old
> > -------------------
>
> You're missing my{cert,key}.pem.
>
> > and in the mail_log there is nothing recorded! No errors or
> > warnings!
>
> Did you restart sendmail?
>
> --
>
> o--------------------------{ Will Maier }--------------------------o
> | web:.......http://www.lfod.us/ | email.........willmaier@ml1.net |
> *---------------------[ BSD: Live Free or Die ]--------------------*
>
>
Sorry I did a mistake! The changes in the .mc file are:

----------------
define(`CERT_DIR', `MAIL_SETTINGS_DIR`'CA')dnl
define(`confCACERT_PATH', `CERT_DIR')dnl
define(`confCACERT', `CERT_DIR/cacert.pem')dnl
define(`confSERVER_CERT', `CERT_DIR/cert.pem')dnl
define(`confSERVER_KEY', `CERT_DIR/key.pem')dnl
define(`confCLIENT_CERT', `CERT_DIR/cert.pem')dnl
define(`confCLIENT_KEY', `CERT_DIR/key.pem')dnl
--------------

using the same certs for 'server' and 'client'! So the files do exist!

And yes I did restart sendmail! I actually did restart the whole box!

In a sendmail book I found following entry they suggested to put in the .mc
file. Could be the reason for my problems?

--------------
dnl define(`confCRL', `CERT_DIR/crl/crl.pem')dnl
-------------

Thanks

George