LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
LinkBack Search this Thread
Old 09-12-2010, 11:32 AM   #1
fast-reflexes
Member
 
Registered: Jul 2010
Distribution: Slackware
Posts: 36

Rep: Reputation: 16
OpenSSL / Sendmail verifies both "TLS cert" and "x509 cert" in client mode, why?


When my Sendmail server starts STARTTLS in client mode, verifies TWO certificates:
Code:
Sep 12 18:04:15 bricktop sm-mta[10119]: NOQUEUE: connect from X
Sep 12 18:04:15 bricktop sm-mta[10119]: AUTH: available mech=NTLM, allowed mech=NTLM
Sep 12 18:04:15 bricktop sm-mta[10119]: o8CG4FJT010119: Milter: no active filter
Sep 12 18:04:15 bricktop sm-mta[10119]: STARTTLS: x509 cert verify: depth=0 /C=XX/ST=XXXXXX/L=XXXXXXXXX/O=XXXXXXXXXXXXXXXXX/CN=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/emailAddress=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX, state=X, reason=XXXXXXXXXXXXXXX
Sep 12 18:04:15 bricktop sm-mta[10119]: STARTTLS: TLS cert verify: depth=0 /C=XX/ST=XXXXXX/L=XXXXXXXXX/O=XXXXXXXXXXXXXXXXX/CN=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/emailAddress=XXXXXXXXXXXXXXXXXXXXXXXXXXXXX, state=X, reason=XXXXXXXXXXXXXXX
Sep 12 18:04:15 bricktop sm-mta[10119]: STARTTLS=server, get_verify: 12 get_peer: 0x82e66f0
This is in client mode when in contact with other servers. Both certs contain the same information and when trying around with my own server, depending on what cert I use, sometimes just one entry foro "TLS cert" occurs and sometimes two entries as above occurs.

All I know is that I have the "normal" setup with the server having one server cert and one server key and depending on which I use, Sendmail, as a client, sees one or two certs.

Are there actually two different certs or is it just the same cert but when formatted in a certain way, two entries shows up as above whereas otherwise just one entry show up? (What's a TLS cert anyway, all of them are X509 certs right?)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
what is "sticky bit mode" , "SUID" , "SGID" augustus123 Linux - General 10 08-03-2012 04:40 AM
Help with certtool (gnutls) "info on invalid cert" error for rsyslog abefroman Linux - Software 0 06-18-2008 03:34 PM
Qmail "make cert" problem linuxkhan Linux - Server 1 04-05-2008 06:07 AM
Lost DHCP Lease when putting computer in "Standby" mode for a "long" time pnellesen Linux - Networking 1 01-06-2005 11:44 PM
redhat 9 frustration....... :/ "krb5-libs" and "openssl" DraaX Linux - Newbie 3 07-25-2003 05:40 PM


All times are GMT -5. The time now is 01:20 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration