On startup, sendmail service complains:
Jun 9 11:07:23 e7 sendmail[4117369]: starting daemon (8.18.2): SMTP+queueing@01:00:00
Jun 9 11:07:23 e7 sendmail[4117369]: STARTTLS=server: file /etc/pki/tls/certs/ca-bundle.crt unsafe: No such file or directory
sendmail log shows messages like this whenever mail is sent through tip.net.au which requires TLS
Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client: file /etc/pki/tls/certs/ca-bundle.crt unsafe: No such file or directory
Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client, error: load verify locs /etc/pki/tls/certs, /etc/pki/tls/certs/ca-bundle.crt failed: 0
Jun 9 03:47:21 e7 sendmail[3995173]: STARTTLS=client, relay=mx1.tip.net.au., version=TLSv1.3, verify=FAIL, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
The mail is still accepted and delivered
What is the correct way to create the missing ca-bundle.crt file? Or is it a misconfigured sendmail?
I note that with the f44 upgrade I received a new sendmail.cf.rpmnew but no sendmail.mc, which I need to adjust.
sendmail.mc contains these lines:
define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl
define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl
define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl
define(`confSERVER_KEY', `/etc/pki/tls/private/sendmail.key')dnl
The above confCACERT file does not exist. 'dnf provides' finds no source for this file.
In which case what is the correct way to fix the configuration?
Checked the current package (sendmail-8.18.2-2.fc44.x86_64.rpm) and it has the same files nominated.
TIA
--
Eyal at Home ([email protected])
--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.