Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.mail.sendmail > #8344
| From | kalevi@kolttonen.fi (Kalevi Kolttonen) |
|---|---|
| Newsgroups | comp.mail.sendmail |
| Subject | Re: sendmail snapshot 8.19.0.2 is available |
| Date | 2026-07-04 00:27 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <1129k2a$3pps6$1@dont-email.me> (permalink) |
| References | (2 earlier) <1126rrg$30po9$1@dont-email.me> <1128sp9$k7k$1@news.misty.com> <11291vg$3kmbk$1@dont-email.me> <1129e05$3o88m$1@dont-email.me> <1129fi0$3ojd0$1@dont-email.me> |
Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:
> Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:
>> Again, If I understood correctly, using 'O' should make exceptions
>> for clients that offer server EKU cert. This is what I have in my
>> access.db:
>>
>> root@omnios:/etc/mail# cat access
>> TLS_Srv_Features:192.168.1.154 O
>> TLS_Srv_Features:fedora.local O
>> Srv_Features:192.168.1.154 v
>> CertIssuer:/C=FI/ST=Uusimaa/L=Helsinki/O=Home/CN=fedora.local RELAY
>
> Well, I guess the sendmail.cf expects 'TLS_Srv' and
> not 'TLS_Srv_Features':
>
> root@omnios:/etc/mail# grep -i tls_s sendmail.cf
> ### tls_server: is connection with server "good" enough?
> Stls_server
> R$* $: $1 $| $>D <$&{server_name}> <?> <! "TLS_Srv"> <>
> R$* $| <?>$* $: $1 $| $>A <$&{server_addr}> <?> <! "TLS_Srv"> <>
> R$* $| <?>$* $: $1 $| <$(access "TLS_Srv": $: ? $)>
>
> So I modified my access.db:
>
> root@omnios:/etc/mail# cat access
> TLS_Srv:192.168.1.154 O
> TLS_Srv:fedora.local O
> Srv_Features:192.168.1.154 v
> CertIssuer:/C=FI/ST=Uusimaa/L=Helsinki/O=Home/CN=fedora.local RELAY
>
> and rebuilt the DB. But still relaying denied...
No! I was missing FEATURE(`tls_session_features'), now I can
see the ruleset Stls_srv_features and as far as I can tell, it
queries access.db using 'TLS_Srv_Features'. So I am back where
I started:
root@omnios:/etc/mail# cat access
TLS_Srv_Features:192.168.1.154 O
TLS_Srv_Features:fedora.local O
Srv_Features:192.168.1.154 v
CertIssuer:/C=FI/ST=Uusimaa/L=Helsinki/O=Home/CN=fedora.local RELAY
Still, relaying denied. I am giving up for tonight.
br,
KK
Back to comp.mail.sendmail | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-06-28 01:42 -0400
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 17:54 +0000
Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-03 02:03 -0400
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 13:47 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 19:13 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-02 23:22 +0000
Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-03 13:50 -0400
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 18:33 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 19:19 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 22:44 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-03 23:10 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-04 00:27 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-04 01:11 +0000
Re: sendmail snapshot 8.19.0.2 is available Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2026-07-07 03:37 -0400
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 13:24 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 14:11 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 17:51 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-09 20:38 +0000
Re: sendmail snapshot 8.19.0.2 is available kalevi@kolttonen.fi (Kalevi Kolttonen) - 2026-07-01 19:22 +0000
csiph-web