From owner-freebsd-questions@FreeBSD.ORG Sat Mar 30 11:56:26 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 82F9E705 for ; Sat, 30 Mar 2013 11:56:26 +0000 (UTC) (envelope-from jerry@seibercom.net) Received: from mail-ye0-f180.google.com (mail-ye0-f180.google.com [209.85.213.180]) by mx1.freebsd.org (Postfix) with ESMTP id 399D9EE1 for ; Sat, 30 Mar 2013 11:56:25 +0000 (UTC) Received: by mail-ye0-f180.google.com with SMTP id q11so138257yen.11 for ; Sat, 30 Mar 2013 04:56:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seibercom.net; s=google; h=x-received:date:from:to:subject:message-id:in-reply-to:references :reply-to:organization:x-mailer:face:mime-version:content-type; bh=AwcN4Zg5OZjPdcqSwrVjYxpuZ0nr3cx0TJiJNpAjnQ4=; b=cqNIfnJpqz42sVxqz47c2hL7S1SREMbRA4vlqh29Vpa50XhCHxTX1zKAz3gvIDPgqH iwREFBEgrorTWlotOZwaviQyKz2U5gU6tm4xw1Y4wOrkyyGhZiz3ZUOUGwtLt/8GNX21 vGfE+3vTNENxCxc0WSc0bDYtYGjkcRjIll7CE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:date:from:to:subject:message-id:in-reply-to:references :reply-to:organization:x-mailer:face:mime-version:content-type :x-gm-message-state; bh=AwcN4Zg5OZjPdcqSwrVjYxpuZ0nr3cx0TJiJNpAjnQ4=; b=KATSQzoVMfQLk6RXzI7IU3LZUR9roB9XjXks2EKWptc3d2GzMCv0j1lOaG/g1U51Zs nSugXN09umm7l6z4Qtjc4BQ0Hnfsi98Fxb3MvLuRa0uz+zPGeO1V8KPV4JyvY3kOv7Ri Tunc/yORaRq5MZn6gRzeKFyVnDcdq5+JOTYgXQo0pdna+qNRnCvacIlUIUc5al338tJ2 7lgl6XhaPSLKKhDCu+Hix/9vjCJF0J59MIgC/dGJUooQi94cxvEiJ3xt9n/7HNVx9Dma qyH+hhfxz6bJ45mYFesoGkE1KGvflYqGJST7lkmWrQ2KG/pHrjCosYTwSYkEpZhfWIEq pdmA== X-Received: by 10.236.75.69 with SMTP id y45mr3106747yhd.120.1364644173123; Sat, 30 Mar 2013 04:49:33 -0700 (PDT) Received: from scorpio.seibercom.net (cpe-076-182-104-150.nc.res.rr.com. [76.182.104.150]) by mx.google.com with ESMTPS id w69sm8923947yhe.4.2013.03.30.04.49.31 (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 30 Mar 2013 04:49:32 -0700 (PDT) Received: from scorpio (localhost [127.0.0.1]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jerry@seibercom.net) by scorpio.seibercom.net (Postfix) with ESMTPSA id 3ZdJ570jfxz2CG4t for ; Sat, 30 Mar 2013 07:49:31 -0400 (EDT) Date: Sat, 30 Mar 2013 07:49:19 -0400 From: Jerry To: FreeBSD Subject: Re: Operation timed out with smtp.gmail.com - please help Message-ID: <20130330074919.7902b8c2@scorpio> In-Reply-To: <5156C349.9010004@FreeBSD.org> References: <201303301014.r2UAEi1W081669@zzz.men.bris.ac.uk> <5156C349.9010004@FreeBSD.org> Organization: seibercom.net X-Mailer: Claws Mail 3.9.0 (GTK+ 2.24.17; amd64-portbld-freebsd8.3) Face: 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 Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/MU1rI9/nMOeeM0dQeh3wCld"; protocol="application/pgp-signature" X-Gm-Message-State: ALoCoQlLRHRdUCqzeG/M7NvgttxquNFTALs13ksD7dq4WYOfcnbGmmMx5Pe7lNPMCqJpR4Ciftz8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: FreeBSD List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Mar 2013 11:56:26 -0000 --Sig_/MU1rI9/nMOeeM0dQeh3wCld Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Sat, 30 Mar 2013 10:49:45 +0000 Matthew Seaman articulated: > Given you're seeing that CONNECTED message there, it certainly does. > The problem with that openssl command seems to be the 'unable to get > local issuer certificate' part. That's possibly openssl being pickier > about verifying certs than sendmail would be, but that certificate > verification step is probably where you're coming adrift. You need to > have the intermediate certs used by Google in your cacert.pem file, so > sendmail will trust the smtp.gmail.com cert. Check the 'confCACERT' > setting in your sendmail.mc. I have a block of code like this: >=20 > define(`CERT_DIR', `MAIL_SETTINGS_DIR`'certs')dnl > define(`confCACERT_PATH', `CERT_DIR')dnl > define(`confCACERT', `CERT_DIR/cacert.pem')dnl > define(`confSERVER_CERT', `CERT_DIR/cert.pem')dnl > define(`confSERVER_KEY', `CERT_DIR/key.pem')dnl > define(`confCLIENT_CERT', `CERT_DIR/cert.pem')dnl > define(`confCLIENT_KEY', `CERT_DIR/key.pem')dnl >=20 > which allows me to put all the keys and certs in /etc/mail/certs/ If you really need the Gmail certs, you can use this to get them: openssl s_client -connect smtp.gmail.com:587 -starttls smtp -showcerts If you feel you really need the "Equifax Secure Certificate Authority" pem, go here and download it. Again, how to set up Sendmail is a task I leave for the student. --=20 Jerry =E2=99=94 Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ --Sig_/MU1rI9/nMOeeM0dQeh3wCld Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iQEcBAEBAgAGBQJRVtFKAAoJEF2rWD2do7dNzAIH/jVcpNtv2/rFedJlfMofpkO1 hsoL6oSJmjtCCS7uITe1W2a9qyfbG+FTndC9HVyKfgly4RoOnXnpP08Rjhp+aKce 00qybEQPbAvlgKhw98Bx0wCyWYvpIIqOQ2aZz9OlnoJWac4TJ1RxyrMEA13A9uKe p4Z53IitVVqfl2b/OzHJlut/xo02eg4StJ9ADEK1RUxrUbsFU5tSqsenjkii+ez4 a73EPGH/wpVNhQf+7gNribOdBIBdHdgOn2dwMHLPg7GzajV3SXsV8xsfsHjX7mk6 q7KfDHK68Xkc6BOuXCmyEZPCJz8fLIvwZv4/WKx/DODwmTFJg/IXN9xlfvPAC8w= =lL2v -----END PGP SIGNATURE----- --Sig_/MU1rI9/nMOeeM0dQeh3wCld--