On Thu, Sep 12, 2024 at 03:32:36PM +0200, Kai Bojens via Exim-users wrote: > I have a very simple question: why would Exim notify about Certificate > errors in regard to DANE/TLS but continue to send the mails anyway? And how > do I stop this behaviour? > > DANE attempt failed; TLS connection to (…) (certificate verification > failed): Verification failed. The certificate differs. > > But the email is then delivered without any errors or problems.
Was the message delivered via the *SAME* MX host that failed DANE verification, or was there another MX host with either no TLSA records, or working TLSA records? -- Viktor. -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/