Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Click here to return to the '10.5: Send mail from Terminal using mail/sendmail' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Send mail from Terminal using mail/sendmail
Authored by: techiejohn on Jan 01, '09 06:53:44AM

Here's the update for the SSL certificate verification:

If you want the verification process to work, you'll need to provide valid certificate authority (CA) certificates to OpenSSL via postfix. For some reason, my computer did not have the default OpenSSL root CA certificates installed. So, I decided to import them from the system root CA keychain.

Run the following:

security find-certificate -a -p /System/Library/Keychains/SystemRootCertificates.keychain > /System/Library/OpenSSL/certs/cert.pem

Include the following in /etc/postfix/

smtp_tls_CAfile = /System/Library/OpenSSL/certs/cert.pem

Now you can change the MUST_NOPEERMATCH to just MUST, and the certificate verification should succeed if the certificate was signed with one of the system-accepted root certificates.

[ Reply to This | # ]