bjorn at mork.no
Mon Aug 1 11:43:20 UTC 2022
Matthew Newton <mcn at freeradius.org> writes:
> On 1 August 2022 10:14:30 BST, Krishna Chaitanya <krishna.chaitanya at qi-cap.com> wrote:
>>Yeah,I am also trying to reach out to somebody from NetworkRadius through
>>email and don't see a response yet from them.
> There is nothing from either of you in the mail server logs, so please check your own mail logs to see what's happened.
I see that you still include the "DST Root CA X3" signed intermediate in
the chain advertised by mail.networkradius.com (and mail.freeradius.org).
Note that this alternate CA chain might cause issues with some SSL
implementations, which will choke on the expired DST root even if they
have the "ISRG Root X1" in their CA database. Don't know if that's the
problem here. But if it is, then you might not see much in your mail
server logs. Only failed connects.
More information about the Freeradius-Users