I'm running postfix on server and client, forcing TLS on both.

No matter what I do, I can't seem to solve "Untrusted TLS connection established to [...]:587: TLSv1 with cipher ADH-AES256-SHA (256/256 bits)" warning messages in the client log file. Aside from those warnings, mail delivery actually works fine.

I configured the server generally using these instructions:

http://nixcraft.com/getting-started-tutorials/3075-postfix-mail-server-create-self-signed-ssl-certificates-cent-os-redhat-linux.html

Just using self-signed certificates.

I then copied the cacert.pem file from the server to the client, and set smtp_tls_CAfile to point at that file on the client, which I thought would add my certificate authority as a "trusted authority" on the client. But I still get the warning the TLS connection is untrusted.

What am I doing wrong?

Reply via email to