[pfx] Let's Encrypt question (maybe EKU?)
Byunghee HWANG (황병희) via Postfix-users <[email protected]>
| Newsgroups | gmane.mail.postfix.user |
|---|---|
| Organization | 金陵 (연원의 마음) |
| Message-ID | <[email protected]> |
Until April 9, it worked well as shown below: <quote> Received: from yw-0919.doraji.xyz (yw-0919.doraji.xyz [34.138.9.181]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) client-signature ECDSA (P-256)) (Client CN "yw-0919.doraji.xyz", Issuer "E7" (verified OK)) by yw-1204.doraji.xyz (Postfix) with ESMTPS id D5D8C69A for <[email protected]>; Wed, 8 Apr 2026 19:12:55 +0000 (UTC) </quote> However, starting from April 10, it fails as follows: <quote> Received: from yw-0919.doraji.xyz (yw-0919.doraji.xyz [34.138.9.181]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) client-signature ECDSA (P-256)) (Client CN "yw-0919.doraji.xyz", Issuer "E8" (not verified)) by yw-1204.doraji.xyz (Postfix) with ESMTPS id 4EF278F8 for <[email protected]>; Fri, 10 Apr 2026 16:58:25 +0000 (UTC) </quote> short summary: "verified OK" -> "not verified" Is this related to the LE announcement [1] by any chance? [1] https://letsencrypt.org/2025/05/14/ending-tls-client-authentication Sincerely, Byunghee -- ^고맙습니다 _布德天下_ 감사합니다_^))// _______________________________________________ Postfix-users mailing list -- [email protected] To unsubscribe send an email to [email protected]
signature.asc
(application/pgp-signature, 227 B)
-----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQRqpiVRMuVtH3ALfA6mdGCB9LBsVwUCadpTmAAKCRCmdGCB9LBs V26mAQCyd88Xxj89dGNn7A6ikO7agryJO0uqCqXq5cYviGZ+uAD+M2iuKffnjtCY hX4sDB5rBD7ei7AZEbAQvSLyhFNrXQ0= =quUX -----END PGP SIGNATURE-----