Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 Jun 2011 21:18:19 -0400
From:      Jerry <jerry@seibercom.net>
To:        FreeBSD <freebsd-questions@freebsd.org>
Subject:   Re: Installing a root certificate in openssl
Message-ID:  <20110603211819.52f7dd62@scorpio>
In-Reply-To: <20110603231740.458681065672@hub.freebsd.org>
References:  <20110603231740.458681065672@hub.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 03 Jun 2011 18:17:39 -0500
jhall@socket.net <jhall@socket.net> articulated:

> I am attempting to get TLS with Postfix working and I have run into a 
> problem and nothing I have tried seems to resolve the problem. 
> 
> When a TLS connection is started, I see the following
> in /var/log/maillog
> 
> Jun  3 17:38:13 mo-bak-s1 postfix/smtp[41281]: certificate
> verification failed for abc.org.s9a1.def.com[WW.XX.YY.ZZ]:25:
> untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate
> Authority 
> 
> I have downloaded the Equifax Secure Certificate Authority.cer,
> converted it to PEM format.  Then, I added the certificate to my
> certfile and restarted Postfix.  I had the same result. 
> 
> My guess is that I am doing something wrong importing the Equifax 
> certificate. 
> 
> Any suggestions would be appreciated.  Have a nice weekend.

Did you run: "c_rehash" on the file? In any event, this is probably
best asked on the Postfix forum. Follow the directions located here for
best results: <http://www.postfix.com/DEBUG_README.html>; particularly
those under: Reporting problems to postfix-users@postfix.org

-- 
Jerry ✌
jerry+fbsd@seibercom.net

Disclaimer: off-list followups get on-list replies or ignored.
Do not CC this poster. Please do not ignore the "Reply-To" header.

http://www.catb.org/~esr/faqs/smart-questions.html



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110603211819.52f7dd62>