[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Viktor Dukhovni via Postfix-users
On Tue, Aug 29, 2023 at 05:47:00PM +0200, Étienne Miret via Postfix-users wrote: > > So what's the difference between a MAriaDB Client file and the > > various "tls_" settings in the connection.cf file > > I was thinking about the MariaDB `ssl` setting, that enable TLS without > validating

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Étienne Miret via Postfix-users
I’m not even sure the Postfix support that setting Sorry for the missing word. I meant “the Postfix client”. Also, with regards to MariaDB client option file, see this Postfix setting: option_file Read options from the given file instead of the default my.cnf location. This reads

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Étienne Miret via Postfix-users
Hi! You said you didn’t change Postfix configuration. I’m pretty sure this is the issue. You configured the server to reject a connection not using TLS, so you need to tell the client to use it. So what's the difference between a MAriaDB Client file and the various "tls_" settings in the

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Viktor Dukhovni via Postfix-users
On Tue, Aug 29, 2023 at 06:42:46PM +1000, Matthew J Black via Postfix-users wrote: > ~~~ > postmap: warning: connect to mysql server sql.my_example.com: Access denied > for user 'mail-user'@'192.168.1.101' (using password: YES) > postmap: fatal: table mysql:/etc/postfix/sql_vdomains.cf: query

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Matthew J Black via Postfix-users
Thanks Étienne, So what's the difference between a MAriaDB Client file and the various "tls_" settings in the connection.cf file (ie see MYSQL_TABLE(5):https://www.postfix.org/mysql_table.5.html )? Hi! From MariaDB 10.5.2, the require_secure_transport system variable is available. When

[pfx] Re: postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Étienne Miret via Postfix-users
Hi! From MariaDB 10.5.2, the require_secure_transport system variable is available. When set (by default it is off), connections attempted using insecure transport will be rejected. Secure transports are SSL/TLS, Unix sockets or named pipes. Note that requirements set for specific user

[pfx] postfix/postmap TLS To MariaDB/MySQL Backend

2023-08-29 Thread Matthew J Black via Postfix-users
Hi All, Got a funny one: Using Postfix 3.8.1 connecting to a MariaDB backend - everything is working AOK. I can get the correct response when I do a `postmap -q my_example.com mysql:/etc/postfix/virtual_domains.cf` - as I said, everything is working AOK. However, when I turn on 1-way TLS