RE: Getting TLS working

> > The CA list is read from the file $HOME/.authenticate/ca.pem 
> > and/or the 
> > directory $HOME/.authenticate/ca.  The former is simply the 
> > concatenation of CAs' public certificates in PEM format; the 
> > latter is 
> > the hashed directory format used by OpenSSL.  The openssl 
> > utility should 
> > be able to create this in the correct format.  
> Unfortunately openssl 
> > documentation is practically non-existent.  To date I've just 
> > used the 
> > ca.pem file rather than the directory as I've found this 
> > simpler to create.
> 
> I've had ca.pem there for some time, with the trusted CA 
> certificate in
> it, but I guess it doesn't like the trusted certificate for 
> some reason?
> Is there some restriction on signing certificates or some other
> requirement that I'm missing?

My mistake, it's SMTP_EV_UNUSABLE_CLIENT_CERTIFICATE.

Neil Youngman