On Thu, Jul 10, 2008 at 5:05 PM, Stuart Henderson <stu@spacehopper.org>
wrote:

quoted text
> On 2008-07-10, GVG GVG <gvgter@googlemail.com> wrote:
> >>
> > Sorry I did a mistake! The changes in the .mc file are:
>
> You did rebuild the .cf file from the .mc file, right?
>
> STARTTLS(8)             OpenBSD System Manager's Manual
>  STARTTLS(8)
>
>     [...]
>
>     Now that you have the TLS-enabled versions of the .mc files you must
> gen-
>     erate .cf files from them and install the .cf files in /etc/mail.
>
>     [...]
>
>
exaclly! That's what I did. Below is a extract from my current sendmail.cfmail:

-----------
# CA directory
O CACertPath=/etc/mail/CA
# CA file
O CACertFile=/etc/mail/CA/cacert.pem
# Server Cert
O ServerCertFile=/etc/mail/CA/cert.pem
# Server private key
O ServerKeyFile=/etc/mail/CA/key.pem
# Client Cert
O ClientCertFile=/etc/mail/CA/cert.pem
# Client private key
O ClientKeyFile=/etc/mail/CA/key.pem
# File containing certificate revocation lists
#O CRLFile
--------------

Thanks

George