Re: [Cialug] sendmail/SSL

[Richard Harms <rh-cialug@xxxxxxxxxxxxxx>]

This is based on what Red Hat's Makefile is doing:

exec /bin/bash
umask 77
PEM1=`/bin/mktemp /tmp/openssl.XXXXXX`
PEM2=`/bin/mktemp /tmp/openssl.XXXXXX`
/usr/bin/openssl req -newkey rsa:1024 -keyout $PEM1 -nodes -x509 -days 
365 -out $PEM2


(answer prompts here)

cat $PEM1 >  sendmail.pem
echo ""   >> sendmail.pem
cat $PEM2 >> sendmail.pem
rm $PEM1 $PEM2

If you're using stunnel, most remote mail servers are not going to 
notice that automatically - SSL enabled sendmail on its own port was a 
very short lived thing and your normal sendmail isn't going to 
advertise the starttls command. If you want it to "just work" mail 
server to mail server, doing it in sendmail is about the only way.

-rh

On Tuesday, June 3, 2003, at 09:04  PM, david l goodrich wrote:

> how would you create the certificates if you didn't have "make 
> sendmail.pem" to do the dirty work for you?  i gave up and ran 
> stunnel.  my conf for stunnel looks like this, if anyone's curious...
> $ cat /etc/stunnel/stunnel.conf
> client = no
> [25]
>
> accept = 465
> connect = 25
> $
> preeetty basic.  465 is the ssmtp port, if you were wondering.
>   --waldo

_______________________________________________
Cialug mailing list
Cialug@xxxxxxxxxx
http://cialug.org/mailman/listinfo/cialug