Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Jan 2002 14:58:46 +0200
From:      Sheldon Hearn <sheldonh@starjuice.net>
To:        freebsd-hackers@FreeBSD.org
Subject:   [OT] OpenSSL, certification chains and Exim
Message-ID:  <51242.1010753926@axl.seasidesoftware.co.za>

next in thread | raw e-mail | index | archive | help

[ This message does not pertain exclusively to FreeBSD and was sent ]
[ to this mailing list more for the clue resident here.             ]

Hi folks,

Several people on the exim-users mailing list have reported problems
with various Wintendo e-mail clients using SMTP TLS against Exim.

A good example is Microsoft Outlook, which sometimes reports:

| The server you are connected to is using a security certificate
| that could not be verified.
| 
| A certificate chain processed, but terminated in a root
| certificate which is not trusted by the trust provider.
| 
| Do you want to continue using this server?

It has been suggested that this is caused by Exim's failure to use the
OpenSSL API properly.  Unfortunately, Philip Hazel (the Exim author) is
not an SSL wizard and doesn't know how to handle this himself.

The following two messages contain an explanation of the suggested
problem, and Philip's call for OpenSSL wizards:

http://www.exim.org/mailman/htdig/exim-users/Week-of-Mon-20011112/032089.html
http://www.exim.org/mailman/htdig/exim-users/Week-of-Mon-20011112/032125.html

If any OpenSSL wizards here feel inclined to take a look, please contact
Philip Hazel <ph10@cus.cam.ac.uk> and me with any ideas or requests for
more information.

Thanks,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?51242.1010753926>