LMTPS : TLS over LMTP not working

[Reindl Harald]

Am 17.11.2014 um 11:24 schrieb Stanislas SABATIER:
> I setup a service in master.conf like this :
>
> dovecotsandbox unix -       -       n       -       10       lmtp
>    -o lmtp_send_xforward_command=yes
>    -o lmtp_tls_security_level=encrypt
>
> Then I tried to add starttls option :
>    -o lmtp_tls_note_starttls_offer=yes
>
> But Postfix still can't deliver the email. Postfix log :
> (…) status=deferred (TLS is required, but was not offered by host xx.xx.xx.xx[xx.xx.xx.xx])

that you should have included in your first post
as somebody else said: seems not to be supported now

just setup a SSH tunnel and let postfix deliver to 127.0.0.1:port

> Le 17 nov. 2014 à 11:03, Reindl Harald <h.reindl at thelounge.net> a écrit :
>
>>
>> Am 17.11.2014 um 10:58 schrieb Stanislas SABATIER:
>>> Hello,
>>> I tried to activate SSL on LMTP service, to secure connections between Postfix and Dovecot on my LAN, but Dovecot is not negociating a TLS session with Postfix.
>>> If I enforce TLS for LMTP at Postfix's side,  communication between Postfix and Dovecot is not working.
>>>
>>> I put
>>>    ssl = yes
>>>    ssl_cert = </dovecot/ssl/ssl-LMTP.pem
>>>    ssl_key = </dovecot/ssl/ssl-LMTP.key
>>> in section protocol LMTP within 20-lmtp.conf
>>>
>>> and
>>> service lmtp {
>>>    inet_listener lmtp {
>>>      name = dovecot_lmtp
>>>      address = xx.xx.xx.xx
>>>      port = 26
>>>      ssl = yes
>>>    }
>>>    process_min_avail = 5
>>> }
>>> within 10-master.conf
>>>
>>> Did I miss something?
>>
>> did you configure postfix?
>> postconf -d | grep tls
>>
>> not sure if postfix prefers STARTTLS only (likely since the smtop-client also don't support wrapper mode and lmtp is more or less the same as smtp)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20141117/06f1e633/attachment.sig>