<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Am 15.05.2017 um 11:33 schrieb Daniel <<a href="mailto:daniel@ist-immer-online.de" class="">daniel@ist-immer-online.de</a>>:</div><div><br class=""><blockquote type="cite" class=""><div class=""><div class="">Ich habe mit smtpd_tls_ask_ccert = yes keine Probleme. Evt. ist kein smtpd_tls_CApath = /etc/ssl/certs/ oder so gesetzt.<br class=""><br class=""></div></div></blockquote><div><br class=""></div></div><div class="">Und warum aktivierst Du es? Nutzt Du Client-Zertifikate zur Authentifizerung z. B. fuer Mailrelaying? Wenn nicht, macht es</div><div class="">keinen Sinn so ein Feature zu aktivieren.</div><div class=""><br class=""></div><div class=""><a href="http://www.postfix.org/postconf.5.html#smtpd_tls_ask_ccert" class="">http://www.postfix.org/postconf.5.html#smtpd_tls_ask_ccert</a></div><div class=""><br class=""></div><div class="">"<span style="font-family: Times; font-size: medium; font-variant-ligatures: normal; orphans: 2; widows: 2;" class="">Some clients such as Netscape will either complain if no certificate is available (for the list of CAs in $</span><a href="http://www.postfix.org/postconf.5.html#smtpd_tls_CAfile" data-ss1494840908="1" style="font-family: Times; font-size: medium; font-variant-ligatures: normal; orphans: 2; widows: 2;" class="">smtpd_tls_CAfile</a><span style="font-family: Times; font-size: medium; font-variant-ligatures: normal; orphans: 2; widows: 2;" class="">) or will offer multiple client certificates to choose from. This may be annoying, so this option is "off" by default."</span></div><div class=""><br class=""></div></body></html>