I decided to set up some of my mail servers to require certification authentication on the submission port (587). In my case, I want to forward mail from my server at home to my public servers out there on the Internet. I don’t want just anyone to be able to submit mail here, so the […]
Postfix client certificate verification Read More »
NOTE: this post title is inaccurate. It was not until later that I discovered the problem was related to 4908-bit certs, not 4096-bit certs. I appear to have found a bug with OSX and iOS. Neither one can handle a 4096-bit certificate by StartCom. Changing to a 2048-bit cert allowed the connection. I have not
mail.app on Apple OSX and IOS fail when connecting to 4096-bit StartCOM certificates Read More »
There I was, just minding my own business, creating a new certificate request, when bang! I got hit with this: # openssl sl genrsa -des3 -out imaps.unixathome.org.key 2048 Generating RSA private key, 2048 bit long modulus ………………………………………………+++ ……………………………………………………………………………..+++ e is 65537 (0x10001) Enter pass phrase for imaps.unixathome.org.key: Verifying – Enter pass phrase for imaps.unixathome.org.key: #
Unable to load config info from /etc/ssl/openssl.cnf Read More »
Last week, while at EuroBSDCon in Malta, I noticed that one of my servers had the wrong time. It was Bacula who told me, through this message in one of the backup jobs: 28-Sep 21:59 nyi-fd JobId 144899: DIR and FD clocks differ by -5 seconds, FD automatically compensating Fixing the time I connected to
different times despite running ntpd Read More »
I have a number of things I want to get done in the short term: remove the mail server on my gateway box at home and start using a mail server on an internal box Configure my external mail servers (out there on the Internet) to use TLS when talking to each other Configure those