[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

STARTTLS wierdness in sendmail 8.12.10-1



I cannot get STARTTLS to work with the newest snendmail in unstable.  It
*always* complains that the key file is group readable!  Now, before you
scream RTFM, I did use GroupReadableKeyFile!

I updated to sendmail 8.12.10-1 to patch CAN-2003-0681 CAN-2003-0694

When I startup I get...

sm-mta[30148]: starting daemon (8.12.10): SMTP
sm-mta[30148]: STARTTLS=server: file /etc/mail/tls/sendmail-common.key
unsafe: Group readable file

Fine, so GroupReadableKeyFile was not set by default as was before, so I
stuck this in starttls.m4 

define(`confDONT_BLAME_SENDMAIL', `GroupReadableKeyFile')

Which does work and puts this in submit.cf

O DontBlameSendmail=GroupReadableKeyFile

But, I *still* get:

sm-mta[6346]: starting daemon (8.12.10): SMTP
sm-mta[6346]: STARTTLS=server: file /etc/mail/tls/sendmail-common.key
unsafe: Group readable file

Back on previous versions from testing and stable I do not get these
messages.

sm-mta[31901]: starting daemon (8.12.9): SMTP
sm-mta[3719]: starting daemon (8.12.3): SMTP

Anyone else see this?

later,
-Brian

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: