Your message dated Sun, 20 Mar 2011 17:16:38 +0100
with message-id <[email protected]>
and subject line Bugs closed
has caused the Debian Bug report #287795,
regarding postfix-tls: postfix cannot verify certs when acting as smtp client
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
287795: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287795
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postfix-tls
Version: 2.1.4-5
Severity: normal

postfix cannot verify other smtp servers' certs when acting as a client, 
because the CA certs in /etc/ssl/certs 
(/usr/share/ca-certificates) are not available in the chroot environment.

my solution (likely not ideal):

set 'smtp_tls_CApath = /certs' in main.cf
cp /usr/share/ca-certificates/*/* /var/spool/postfix/certs/
change .crt suffixes of files to .pem
c_rehash /var/spool/postfix/certs

hope this helps

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-386
Locale: LANG=en_US, LC_CTYPE=en_US

Versions of packages postfix-tls depends on:
ii  libc6                       2.3.2.ds1-18 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-17    Berkeley v4.2 Database Libraries [
ii  libgdbm3                    1.8.3-2      GNU dbm database routines (runtime
ii  libsasl2                    2.1.19-1.5   Authentication abstraction library
ii  libssl0.9.7                 0.9.7d-5     SSL shared libraries
ii  postfix                     2.1.4-5      A high-performance mail transport 

-- no debconf information


--- End Message ---
--- Begin Message ---
Version: 2.8.0-1

For whatever reason, these bugs weren't closed when the version where
they are really fixed was uploaded. 



--- End Message ---

Reply via email to