On 12/15/07, Andrei Popescu <[EMAIL PROTECTED]> wrote: > On Fri, Dec 14, 2007 at 09:54:17PM +1100, hce wrote: > > > Could it be the problem of ssl-cert-snakeoil.pem and > > ssl-cert-snakeoil.key? Should I manually to create them by openssl > > (and how?)? > > > > smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem > > smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key > -----^^^ > > You're the client here not the server. For gmail as relayhost I have > this setup:
Does that mean I don't need to worry about ssl-cert-snakeoil.pem and ssl-cert-snakeoil.key, were they created by server? > ---[ /etc/postfix/main.cf ]--- > > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > smtp_sasl_auth_enable = yes > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd > smtp_sasl_type = cyrus > smtp_sasl_security_options = > > ------------------------------ > > ---[ /etc/postfix/tls_policy ]--- > > [smtp.gmail.com]:587 encrypt > > --------------------------------- > > ---[ /etc/postfix/sasl_passwd ]--- > > [smtp.gmail.com]:587 [EMAIL PROTECTED]:my_password > I added those as per above, but same errors: Dec 15 11:01:15 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=20:unable to get local issuer certificate Dec 15 11:01:15 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=27:certificate not trusted Dec 15 11:01:15 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=21:unable to verify the first certificate Dec 15 11:01:16 debian postfix/smtp[4779]: warning: SASL authentication failure: No worthy mechs found Dec 15 11:01:16 debian postfix/smtp[4779]: 21BB842ABC: SASL authentication failed; cannot authenticate to server smtp.gmail.com[209.85.133.109]: no mechanism available Dec 15 11:01:18 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=20:unable to get local issuer certificate Dec 15 11:01:18 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=27:certificate not trusted Dec 15 11:01:18 debian postfix/smtp[4779]: certificate verification failed for smtp.gmail.com: num=21:unable to verify the first certificate Dec 15 11:01:19 debian postfix/smtp[4779]: warning: SASL authentication failure: No worthy mechs found Thank you Andrei. Kind Regards, Jim -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]