Dear all... A little problem When i try to send a mail from the webmail-client, i get the error when postfix try to deliver the mail: Code: Aug 28 19:55:14 web1 postfix/smtp[21178]: certificate verification failed for dkcphmx08.softcom.dk: num=20:unable to get local issuer certificate Aug 28 19:55:14 web1 postfix/smtp[21178]: certificate verification failed for dkcphmx08.softcom.dk: num=27:certificate not trusted Aug 28 19:55:14 web1 postfix/smtp[21178]: certificate verification failed for dkcphmx08.softcom.dk: num=21:unable to verify the first certificate Aug 28 19:55:14 web1 postfix/smtp[21178]: Server certificate could not be verified I tried to make a new certificat to postfix: Code: openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 chmod 600 smtpd.key openssl req -new -key smtpd.key -out smtpd.csr openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt openssl rsa -in smtpd.key -out smtpd.key.unencrypted mv -f smtpd.key.unencrypted smtpd.key openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650 And also to ISP_Config Code: openssl genrsa -des3 -passout pass:blueprint -out /root/ispconfig/httpd/conf/ssl.key/server.key2 1024 openssl req -new -passin pass:blueprint -passout pass:blueprint -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.csr/server.csr -days 365 openssl req -x509 -passin pass:blueprint -passout pass:blueprint -key /root/ispconfig/httpd/conf/ssl.key/server.key2 -in /root/ispconfig/httpd/conf/ssl.csr/server.csr -out /root/ispconfig/httpd/conf/ssl.crt/server.crt -days 365 openssl rsa -passin pass:blueprint -in /root/ispconfig/httpd/conf/ssl.key/server.key2 -out /root/ispconfig/httpd/conf/ssl.key/server.key chmod 400 /root/ispconfig/httpd/conf/ssl.key/server.key but the same problem ? I can recive mail's but not send ? br /Niki
Mail: Code: Aug 30 07:28:10 web1 postfix/smtpd[3457]: connect from localhost[127.0.0.1] Aug 30 07:28:10 web1 postfix/smtpd[3457]: 416446F444F: client=localhost[127.0.0.1] Aug 30 07:28:10 web1 postfix/cleanup[3458]: 416446F444F: message-id=<41d48608cd2d1f0d2468ae8fbba34706@localhost> Aug 30 07:28:10 web1 postfix/qmgr[3319]: 416446F444F: from=<[email protected]>, size=530, nrcpt=1 (queue active) Aug 30 07:28:10 web1 imapd: LOGOUT, user=niki, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0 Aug 30 07:28:10 web1 postfix/smtpd[3457]: disconnect from localhost[127.0.0.1] Aug 30 07:28:10 web1 imapd: Connection, ip=[::ffff:127.0.0.1] Aug 30 07:28:10 web1 imapd: LOGIN, user=niki, ip=[::ffff:127.0.0.1], protocol=IMAP Aug 30 07:28:10 web1 imapd: LOGOUT, user=niki, ip=[::ffff:127.0.0.1], headers=0, body=0, time=0 Aug 30 07:28:10 web1 postfix/smtp[3459]: certificate verification failed for dkcphmx38.softcom.dk: num=20:unable to get local issuer certificate Aug 30 07:28:10 web1 postfix/smtp[3459]: certificate verification failed for dkcphmx38.softcom.dk: num=27:certificate not trusted Aug 30 07:28:10 web1 postfix/smtp[3459]: certificate verification failed for dkcphmx38.softcom.dk: num=21:unable to verify the first certificate Aug 30 07:28:10 web1 postfix/smtp[3459]: Server certificate could not be verified Aug 30 07:28:12 web1 postfix/smtp[3459]: 416446F444F: to=<[email protected]>, relay=dkcphmx38.softcom.dk[213.150.52.211], delay=2, status=sent (250 Message queued as: msg.1156915690.868470.10506) Aug 30 07:28:12 web1 postfix/qmgr[3319]: 416446F444F: removed /niki
Then the wrong certificate is not on your server, it is on the server you are sending to. Normally messages where delivered fine even when the certificate can not be verified.
It seems to be working now... The mail's are comming trough. We have contacted softcom, to find the cause. Thanks for the help