From owner-freebsd-stable  Wed Apr  3 10:56: 8 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178])
	by hub.freebsd.org (Postfix) with ESMTP id 1A28137B41B
	for <freebsd-stable@FreeBSD.ORG>; Wed,  3 Apr 2002 10:55:55 -0800 (PST)
Received: from horsey.gshapiro.net (gshapiro@localhost [127.0.0.1])
	by horsey.gshapiro.net (8.12.3.Gamma1/8.12.3.Gamma1) with ESMTP id g33Itsd9020792
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Wed, 3 Apr 2002 10:55:54 -0800 (PST)
Received: (from gshapiro@localhost)
	by horsey.gshapiro.net (8.12.3.Gamma1/8.12.3.Gamma1/Submit) id g33Itspg020789;
	Wed, 3 Apr 2002 10:55:54 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15531.20538.197851.421085@horsey.gshapiro.net>
Date: Wed, 3 Apr 2002 10:55:54 -0800
From: Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>
To: shagol@shagol.com
Cc: freebsd-stable@FreeBSD.ORG
Subject: Re: sendmail and TLS/SSL
In-Reply-To: <3CAB4A49.7040401@haug.li>
References: <3CAB4A49.7040401@haug.li>
X-Mailer: VM 7.00 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

thomas> After doing a cvsup on my 4.5-STABLE Box i got a few problems with my 
thomas> ssl certs... the sendmail deamon runs under another user now, so there 
thomas> is no more access to the private key file...

No, the MTA which listens on port 25 is still started by and running as
root.

thomas> if i'm going to chmod this file 640 or 440 i'm getting a lot of error 
thomas> msgs: Warning: File group readable...  is there a solution for that ?

Don't change the permissions.  Leave it as readable only by root.

thomas> is sendmail running under the smmsp user or under mail-null ?

The submission agent does run as smmsp, but not the MTA.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message