On Sat, 2011-08-20 at 09:19:54 +0000, Georg Sauthoff wrote: > I upgraded my Ubuntu box from 10.04 to 11.10, i.e. postfix was > upgraded from 2.7.0 to 2.8.0. > > The local postfix is setup to relay mail to a remote server, including > mandatory TLS and certificate verification. The setup worked great > with 2.7.0, but after the upgrade I get following errors: > > certificate verification failed for example.org untrusted issuer > /C=DE/ST=NW/O=My CA/CN=Me/email=mys...@example.org [..] > status=deferred (Server certificate not trusted) > > (I did not change the postfix config during the postfix upgrade) > > The directory /etc/postfix contains the certificate from the relay > host (and c_rehash was executed). > > Was the verification algorithm somehow changed between postfix 2.7.0 > and 2.8.0?
Without more information, my WAG is that this could be related to Incompat 20100610 noted in the RELEASE_NOTES for 2.8. -- Sahil Tandon <sa...@freebsd.org>