On 2012-07-19 17:43:28, Andreas Schulze wrote:
> > Clients authenticate via self-signed tls certs, and I am trying
> > to use cert_issuer as the authentication.
> postconf -e "debug_peer_list=$client_ip" && postfix reload
> then send a mail and search the maillog for "cert_issuer".
> Is the value really equal to "lifeintegrity.com"
As far as I could tell it looked fine when I did this last night. Here is
part of the trace I just did:
Jul 19 17:35:43 pawan postfix/smtpd[25903]: milter_macro_lookup: result "lifeintegrity.com"
Jul 19 17:35:43 pawan postfix/smtpd[25903]: milter8_data_event: milter inet:localhost:12345: data command
Jul 19 17:35:43 pawan postfix/smtpd[25903]: event: SMFIC_DATA; macros: i=8B207525 {cert_issuer}=lifeintegrity.com
and I uploaded the full log here: <
http://pastebin.com/vgw1eg6c>
> Also I would try to change MacroList.
> opendkim.conf:
> MacroList file:/path/to/macrolist.txt
>
> /path/to/macrolist.txt
> cert_issuer $VALUE_VERIFIED_IN_MAILLOG
Domain lifeintegrity.com
KeyFile /etc/opendkim/private.pem
LogWhy yes
MacroList /etc/opendkim/MacroList
Selector s0
Syslog yes
UMask 002
# cat /etc/opendkim/MacroList
cert_issuer lifeintegrity.com
> restart opendkim of course ...
Done.
/Allan
--
Allan Wind
Life Integrity, LLC
<http://lifeintegrity.com>
Received on Thu Jul 19 2012 - 17:50:12 PST