Mailinglist Archive: opensuse (3468 mails)

[Sandy Drobic <suse-linux-e@xxxxxxxxxxxxxxxxxxxxxxx>]

Carlos E. R. wrote:

> I enabled TLS:
> 
>   smtp_use_tls = yes
> 
> but that doesn't work:
> 
> Apr 18 01:01:38 nimrodel postfix/qmgr[15755]: ADFEBB6EAD: removed
> Apr 18 01:01:38 nimrodel postfix/smtp[18419]: warning: connect to private/tlsmgr: Connection refused
> Apr 18 01:01:38 nimrodel postfix/smtp[18419]: warning: problem talking to server private/tlsmgr: Connection refused
> Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: connect to private/tlsmgr: Connection refused
> Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: problem talking to server private/tlsmgr: Connection refused
> Apr 18 01:01:39 nimrodel postfix/smtp[18419]: warning: no entropy for TLS key generation: disabling TLS support

You have a problem with the tlsmgr. Please check that you indeed have an
entry for tlsmgr:

/etc/postfix/master.cf:
tlsmgr    unix  -       -       n       1000?   1       tlsmgr

Also run:
postfix upgrade-configuration
postfix set-permissions
postfix check

This applies escpecially if you have upgraded your system from earlier
versions of Suse.

You might also want to check if AppArmor is interfering.

> 
> I understand that using tsl for server is more complicated, defining keys, 
> etc. But as a client, I thought it was easier. I must be missing 
> something.
> 
> Ok... my config is thus (postconf | grep smtp_tls):

No certs are neccessary for Postfix to use TLS as a client.

> 
> 
>    smtp_use_tls (default: no)                                                                               
>     ...
>     This feature is available in Postfix 2.2 and later. With 
>      Postfix 2.3 and later use smtp_tls_security_level instead.
> 

Yes, the setting is deprecated, for Postfix 2.3 upwards the parameter
below should be used.

>   smtp_tls_security_level (default: empty)                                                                 


-- 
Sandy

List replies only please!
Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx