Sendmail and STARTTLS
George Mitchell
george+freebsd at m5p.com
Tue Nov 29 15:49:54 UTC 2016
On 11/28/16 14:19, George Mitchell wrote:
> [...]
>>> What am I doing wrong? How can I enter VERIFY=YES nirvana? -- George
> [...]
Okay, I have convinced myself that I am misinterpreting what my mail
log is telling me. I did a packet capture of the last email message
I received from mx2.freebsd.org, and even though the STARTTLS entry
tells me "VERIFY=FAIL", the headers and content of the email were
encrypted anyway. It's just that either mx2.freebsd.org couldn't
verify that mailhost.m5p.com is really mailhost.m5p.com, or the other
way around. That's annoying, but the main point of the exercise wasto
encrypt the data, and that's what is happening. So I'm happier now,
though at some point I would like the identify verification to work
correctly as well. Baby steps ... -- George
More information about the freebsd-hackers
mailing list