-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alexander Dalloz wrote: <<--snip-->> | | James, | | when Sendmail reports that problem in the maillog, then the CA cert is | not there or has wrong permissions. Please post your sendmail.mc entries | for the certificates, to see the names and locations you chose. And post | the output of "ls -al /path/to/certificates". | | Alexander | | | [root@beta mail]# ls -al /usr/share/ssl/certs total 284 drwxr-xr-x 2 root root 4096 Jul 13 16:06 . drwxr-xr-x 7 root root 4096 Jul 13 10:13 .. - -rw-r--r-- 1 root root 249373 Mar 17 18:35 ca-bundle.crt - -rw------- 1 root root 1464 Jan 2 2004 dovecot.pem - -rw------- 1 root root 2352 Jan 2 2004 imapd.pem - -rw------- 1 root root 2336 Jul 13 10:14 ipop3d.pem - -rw-r--r-- 1 root root 610 Mar 17 18:35 make-dummy-cert - -rw-r--r-- 1 root root 1832 Mar 17 18:35 Makefile - -rw------- 1 root root 2336 Jul 13 10:14 sendmail.pem - -rw-r----- 1 root ldap 2352 Jan 2 2004 slapd.pem [root@beta mail]# in sendmail.mc dnl # dnl # Rudimentary information on creating certificates for sendmail TLS: dnl # make -C /usr/share/ssl/certs usage dnl # define(`confCACERT_PATH',`/usr/share/ssl/certs') define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt') define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem') define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem') dnl # Thanks, James -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFA9VuDc7lFLjBWKW0RAgp6AJ4vMX5lOr5eLXg3B9BCaIP4sBZbUwCfUWKK Q/qL+hixrswh2qoGlGUdOU8= =WR1j -----END PGP SIGNATURE-----