I have setup my system to send emails via Gmail.
The system works in so far as I can send emails, however I'm getting an error regarding the secure certificate.
This is an example entry in the mail.log:
Oct 29 12:17:27 durban postfix/smtp: setting up TLS connection to smtp.gmail.com[22.214.171.124]:587 Oct 29 12:17:27 durban postfix/smtp: certificate verification failed for smtp.gmail.com[126.96.36.199]:587: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority Oct 29 12:17:27 durban postfix/smtp: Untrusted TLS connection established to smtp.gmail.com[188.8.131.52]:587: TLSv1 with cipher RC4-SHA (128/128 bits) Oct 29 12:17:29 durban postfix/smtp: BA4852A1BFA: to=<firstname.lastname@example.org>, relay=smtp.gmail.com[184.108.40.206]:587, delay=2.9, delays=0.1/0.1/1.3/1.4, dsn=2.0.0, status=sent (250 2.0.0 OK 1319887049 l20sm20686943wbo.6)
I googled this issue and have found others with the problem who were able to solve it by updating a file called cacert.pem in the /etc/postfix directory.
In my main.cf I have the following line (amongst others):
I have this file:
-rw-r--r-- 1 root root 2298 2011-10-29 12:16 cacert.pem
I populated this file with the commands:
# cat /usr/lib/ssl/certs/Equifax_Secure_CA.pem >> /etc/postfix/cacert.pem # cat /usr/lib/ssl/certs/Thawte_Premium_Server_CA.pem >> /etc/postfix/cacert.pem
I believe the first line should suffice and the second line (certificate) is an old no longer used (by google) certificate.
I don't know what else I can change and don't have any idea on what else to search for or which logfiles to check.
Any hints appreciated.