Menu

#254 "not authenticated" when using postfix submission with tls client cert

2.7.0
open
nobody
None
5
2017-04-19
2017-04-19
Sami Farin
No

I have in postfix configured submission with opendkim:

submission inet n       -       n       -       -       smtpd
  -o smtpd_recipient_restrictions=permit_tls_clientcerts,reject
  -o smtpd_tls_security_level=encrypt
  -o smtpd_tls_auth_only=no
  -o smtpd_tls_req_ccert=yes
   ...
  -o smtpd_milters=unix:/var/run/opendkim/opendkim.sock

Well, it works, except that opendkim says "not authenticated" :

postfix/smtpd[9044]: Trusted TLS connection established from unknown[1.2.3.4]: TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)
opendkim[8590]: x: [1.2.3.4] [1.2.3.4] not internal
opendkim[8590]: x: not authenticated
opendkim[8590]: x: no signature data

When I submit mail via 127.0.0.1:25, opendkim makes OK signature.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB