From owner-freebsd-questions@FreeBSD.ORG Sat Jun 4 01:18:24 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3180F106564A for ; Sat, 4 Jun 2011 01:18:24 +0000 (UTC) (envelope-from jerry@seibercom.net) Received: from mail-yi0-f54.google.com (mail-yi0-f54.google.com [209.85.218.54]) by mx1.freebsd.org (Postfix) with ESMTP id DB93B8FC14 for ; Sat, 4 Jun 2011 01:18:23 +0000 (UTC) Received: by yie12 with SMTP id 12so1498468yie.13 for ; Fri, 03 Jun 2011 18:18:23 -0700 (PDT) Received: by 10.101.207.30 with SMTP id j30mr1776102anq.86.1307150302876; Fri, 03 Jun 2011 18:18:22 -0700 (PDT) Received: from scorpio.seibercom.net (twdp-174-109-142-001.nc.res.rr.com [174.109.142.1]) by mx.google.com with ESMTPS id b25sm1544708anb.20.2011.06.03.18.18.21 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 03 Jun 2011 18:18:21 -0700 (PDT) Received: from scorpio (zeus [192.168.1.1]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jerry@scorpio.seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 3QmPYm3k96z2CG44 for ; Fri, 3 Jun 2011 21:18:20 -0400 (EDT) Date: Fri, 3 Jun 2011 21:18:19 -0400 From: Jerry To: FreeBSD Message-ID: <20110603211819.52f7dd62@scorpio> In-Reply-To: <20110603231740.458681065672@hub.freebsd.org> References: <20110603231740.458681065672@hub.freebsd.org> Organization: seibercom.net X-Mailer: Claws Mail 3.7.9 (GTK+ 2.22.1; amd64-portbld-freebsd8.2) Face: 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 Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Subject: Re: Installing a root certificate in openssl X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: FreeBSD List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jun 2011 01:18:24 -0000 On Fri, 03 Jun 2011 18:17:39 -0500 jhall@socket.net articulated: > I am attempting to get TLS with Postfix working and I have run into a > problem and nothing I have tried seems to resolve the problem. > > When a TLS connection is started, I see the following > in /var/log/maillog > > Jun 3 17:38:13 mo-bak-s1 postfix/smtp[41281]: certificate > verification failed for abc.org.s9a1.def.com[WW.XX.YY.ZZ]:25: > untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate > Authority > > I have downloaded the Equifax Secure Certificate Authority.cer, > converted it to PEM format. Then, I added the certificate to my > certfile and restarted Postfix. I had the same result. > > My guess is that I am doing something wrong importing the Equifax > certificate. > > Any suggestions would be appreciated. Have a nice weekend. Did you run: "c_rehash" on the file? In any event, this is probably best asked on the Postfix forum. Follow the directions located here for best results: ; particularly those under: Reporting problems to postfix-users@postfix.org -- Jerry ✌ jerry+fbsd@seibercom.net Disclaimer: off-list followups get on-list replies or ignored. Do not CC this poster. Please do not ignore the "Reply-To" header. http://www.catb.org/~esr/faqs/smart-questions.html