Antw: Re: TLS_REQCERT and no server certificate

["Ulrich Windl" <Ulrich.Windl@rz.uni-regensburg.de>]

Hi!

"It doesn't do cert chain checking so it will accept self-signed certs."

Even if it does cert chain checking, a self-signed certificate will be accepted! What are you saying?

Regards,
Ulrich


>>> Todd Lyons <tlyons@ivenue.com> schrieb am 12.11.2013 um 14:26 in Nachricht
<CAFG21ogCpL1q4hBU-y1tqLxRML1xrMN3tVkB-qj23mzBUZJGLg@mail.gmail.com>:
> On Tue, Nov 12, 2013 at 2:34 AM, Jan Synacek <jsynacek@redhat.com> wrote:
>> Is the manpage wrong or is there any other way I can test the client with no
>> server certificate provided?
> 
> I forgot to answer the second part.  I just use accept.  With tcpdump,
> you can verify if it is or is not using encryption.  It doesn't do
> cert chain checking so it will accept self-signed certs.
> 
> ...Todd
> -- 
> The total budget at all receivers for solving senders' problems is $0.
>  If you want them to accept your mail and manage it the way you want,
> send it the way the spec says to. --John Levine