{"id":509,"date":"2013-08-30T14:53:11","date_gmt":"2013-08-30T12:53:11","guid":{"rendered":"http:\/\/ndk.sytes.net\/wordpress\/?p=509"},"modified":"2013-08-30T14:53:11","modified_gmt":"2013-08-30T12:53:11","slug":"sendmail-running-smtp-with-tls","status":"publish","type":"post","link":"https:\/\/ndk.sytes.net\/wordpress\/?p=509","title":{"rendered":"Sendmail: Running SMTP With TLS"},"content":{"rendered":"

\n\tIf you want to run your sendmail config with TLS enabled, here are some configration options you can add to your sendmail.mc file:\n<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n\t\t\t\tOption<\/em>\n\t\t\t<\/td>\n\n\t\t\t\tDescription<\/em>\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confCACERT', `path\/to\/file.ca')\n\t\t\t<\/td>\n\n\t\t\t\tset the CA file\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confCACERT_PATH', `path\/to\/certs')\n\t\t\t<\/td>\n\n\t\t\t\tpath to the certificate folder\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confCLIENT_CERT', `path\/to\/file.crt')\n\t\t\t<\/td>\n\n\t\t\t\tset the certificate used when sendmail connects to another host\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confCLIENT_KEY', `path\/to\/file.key')\n\t\t\t<\/td>\n\n\t\t\t\tset the certificate key file used when sendmail connects to another host\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confSERVER_CERT', `path\/to\/file.crt')\n\t\t\t<\/td>\n\n\t\t\t\tset the certificate used when someone connects to sendmail\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confSERVER_KEY', `path\/to\/file.key')\n\t\t\t<\/td>\n\n\t\t\t\tset the certificate key file used when someone connects to sendmail\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confCRL', `path\/to\/file.crl')\n\t\t\t<\/td>\n\n\t\t\t\tset file containing Cerificate Revocation List\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confTO_STARTTLS', `1h')\n\t\t\t<\/td>\n\n\t\t\t\tset the time out for the STARTTLS command (default: 1h)\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confDH_PARAMETERS', `path\/to\/file.dh')\n\t\t\t<\/td>\n\n\t\t\t\tset the file containing Diffie-Hellmann (DH) parameters\n\t\t\t<\/td>\n<\/tr>\n
\n\t\t\t\tdefine(`confTLS_SVR_OPTIONS', `V')\n\t\t\t<\/td>\n\n\t\t\t\tset TLS options (argument V disables certificate verification)\n\t\t\t<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\n\tif all parameters you want have been added, simple recompile the sendmail.cf with following command:
\n\t# m4 sendmail.mc > sendmail.cf<\/em>\n<\/p>\n

\n\tand restart your sendmail service.\n<\/p>\n

\n\tNote on GMX and WEB.DE servers:
\n\tthe DH parameter is needed if these clients refuse to connect an deliver email or see similar errors in your log:<\/strong>\n<\/p>\n

\n\tSTARTTLS=server, error: accept failed=0, SSL_error=1, errno=0, retry=-1\n<\/p>\n

\n\tSTARTTLS=server: 11964:error:1409442F:SSL routines:SSL3_READ_BYTES:tlsv1 alert insufficient security:s3_pkt.c:1092:SSL alert number 71<\/span>\n<\/p>\n

\n\t <\/p>\n","protected":false},"excerpt":{"rendered":"

If you want to run your sendmail config with TLS enabled, here are some configration options you can add to your sendmail.mc file: Option Description define(`confCACERT', `path\/to\/file.ca') set the CA file define(`confCACERT_PATH', `path\/to\/certs') path to the certificate folder define(`confCLIENT_CERT', `path\/to\/file.crt') set the certificate used when sendmail connects to another host define(`confCLIENT_KEY', `path\/to\/file.key') set the certificate key file used when […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,7],"tags":[],"class_list":["post-509","post","type-post","status-publish","format-standard","hentry","category-linuxunix","category-servers"],"_links":{"self":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/509","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=509"}],"version-history":[{"count":0,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/509\/revisions"}],"wp:attachment":[{"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=509"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=509"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ndk.sytes.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=509"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}