>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Noah
>Sent: Thursday, May 27, 2004 12:40 PM
>Hi there,
>
>how do I configure sendmail to support smtps (SSL before SMTP)
> I want to
>configure this. any links out there show how to do this please?
>
>
>- Noah
I found all i needed on the net but it wasn't all in one place.
Here's some of what I did.
In /etc/make.conf
# add alternate port (smtps) for sendmail
SENDMAIL_CFLAGS+= -D_FFR_SMTP_SSL
and rebuild the world (or if you're smarter than me you can rebuild only the sendmail
part).
In your /etc/mail/${hostname}.sendmail.mc, define the service itself.
The first part is to define the certificates, they are used for both STARTTLS and
smtps. There are plenty of sites that'll tell you how to generate those. Mine is a bit
unusual as I don't use a self-signed certificate, I'm using a different CA as root.
It's easiest, but costs money, to use a "real" root CA and avoid the hassle of
configuring outlook/windows to trust a new root certificate.
dnl add STARTTLS support
define(`CERT_DIR', `MAIL_SETTINGS_DIR`'certs')dnl
define(`confCACERT_PATH', `CERT_DIR')dnl
define(`confCACERT', `CERT_DIR/mitelroot_cert.pem')dnl
define(`confSERVER_CERT', `CERT_DIR/cert.pem')dnl
define(`confSERVER_KEY', `CERT_DIR/priv_key.pem')dnl
define(`confCLIENT_CERT', `CERT_DIR/cert.pem')dnl
define(`confCLIENT_KEY', `CERT_DIR/priv_key.pem')dnl
then add support on the smtps port...
DAEMON_OPTIONS(`Port=smtps,Addr={put_your_addr_here}, Name=TLSMTA, M=s')dnl smtp over
TLS on port 465
then do the standard make and make restart thingie to restart sendmail
try it out and see what fails (it helps to bump sendmail logging to 64).
-lee
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
