New server using old server config, alert unknown ca error

2013-12-28 Thread Charles Marcus
Hello all, I'm setting up a new mail server to replace our 9 year old one, and everything works - sending using submission+STARTTLS, receiving, mailman lists, etc - with one exception... I use PostfixAdmin, and its vacation.pl script for managing vacation messages, and it is the sending of

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Viktor Dukhovni
On Sat, Dec 28, 2013 at 11:57:23AM -0500, Charles Marcus wrote: I use PostfixAdmin, and its vacation.pl script for managing vacation messages, and it is the sending of the vacation message that fails with the subject error: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Charles Marcus
On 2013-12-28 12:41 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sat, Dec 28, 2013 at 11:57:23AM -0500, Charles Marcus wrote: I use PostfixAdmin, and its vacation.pl script for managing vacation messages, and it is the sending of the vacation message that fails with the subject

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Viktor Dukhovni
On Sat, Dec 28, 2013 at 01:10:55PM -0500, Charles Marcus wrote: vacation.pl is, obviously, a perl script, so is using perl's Mail::Sender module. I think vacation.pl should be using sendmail(1) rather than SMTP to inject auto-response messages. The documentation for Mail::Sender v0.8.22

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Charles Marcus
On 2013-12-28 1:31 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sat, Dec 28, 2013 at 01:10:55PM -0500, Charles Marcus wrote: vacation.pl is, obviously, a perl script, so is using perl's Mail::Sender module. I think vacation.pl should be using sendmail(1) rather than SMTP to inject

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Viktor Dukhovni
On Sat, Dec 28, 2013 at 02:49:01PM -0500, Charles Marcus wrote: If TLS_allowed insists on authentication, then having it on by default is rather unwise. You may be able to unset this, but better yet, use local submission rather than SMTP for vacation re-injection. Thanks Victor, but

Re: New server using old server config, alert unknown ca error

2013-12-28 Thread Charles Marcus
On 2013-12-28 3:11 PM, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sat, Dec 28, 2013 at 02:49:01PM -0500, Charles Marcus wrote: If TLS_allowed insists on authentication, then having it on by default is rather unwise. You may be able to unset this, but better yet, use local submission