On Fri, Aug 21, 2009 at 04:51:45PM +0200, Patrick Ben Koetter wrote:
> * Victor Duchovni <[email protected]>:
> > On Fri, Aug 21, 2009 at 06:02:41AM -0500, Noel Jones wrote:
> >
> > > Florin Andrei wrote:
> > >> Is there any magic incantation that needs to be performed to convince
> > >> the iPhone to present the certificate to Postfix? The puzzling part is
> > >> that it seems to work fine with Dovecot and imaps.
> > >
> > > Very few mail clients support client certificates. Unless you will be
> > > using only clients known to support certificates, don't bother with them.
> >
> > The only mainstream fully-featured MUA I've found that supports client
> > certs with SMTP is Mulberry. Outlook, Mail.app, Thunderbird, ... do not
> > IIRC.
>
> Thunderbird does.
> Turn on smtpd_tls_req_ccert and try to send using Thunderbird.
It has been some time since I looked at this, hence the IIRC. Mulberry
made the setting explicit, and perhaps allowed one to choose the right
client cert. If I recall correctly, Thunderbird uses certificates
silently, without explicit configuration control... I any case, this
is not a very frequently used MUA feature.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[email protected]?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
