[SOLVED] Mutual TLS

M

MartinH

Active Member
Aug 28, 2019
17
1
43
Hi Everyone.

Our customer muss send mails to another server which requests mutual TLS.

Is it possible to set mutual TLS on Proxmox Mail GW?
 
  • Like
Reactions: MartinH
mira said:
That's not possible directly via the GUI.
PMG itself has no support for this, but it seems Postfix can be configured [0].

Setting this option in postfix will add the requirement for every client to provide a certificate. This in turn can lead to issues if clients don't provide one [1].


[0] http://www.postfix.org/TLS_README.html#server_vrfy_client
[1] http://www.postfix.org/TLS_README.html#client_tls_limits
Click to expand...

Hi, thanks for your fast reply.

Sorry for the misunderstanding. We need to send mails form Proxmox Mail GW to a server which require mutual TLS. So we need to provide our certificate to the remote mail server.
 
mira said:
I'm sorry, I missed that.

If you require your postfix to present a client certificate to a server you send mails to, then the following applies:
http://www.postfix.org/TLS_README.html#client_cert_key

This comes with its own issues again though.
Click to expand...
Thank you very much Mira

That's works perfect, but I am a little bit worry about: "Client certificates are not usually needed, and can cause problems in configurations that work well without them."

What kinds of problems should I expect? I it possible to do this setting only for one remote server?
 
That I can't answer. We don't have experience with that kind of a setup and it's not supported by us.

But I assume some mail servers can't handle it if a sending server sends a client certificate?
 
  • Like
Reactions: MartinH
You must log in or register to reply here.
Top Bottom