Re: [exim-dev] [Bug 786] tls_verify_hosts not verifying X509…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Chris Edwards
Date:  
À: exim-dev
Sujet: Re: [exim-dev] [Bug 786] tls_verify_hosts not verifying X509 signed from Outlook 2007
On Tue, 2 Dec 2008, jwexler@??? wrote:

| Outlook appears to send the server certificate that I loaded in Outlook's
| trusted center.


That's very strange.

Normally, a *server* certificate is sent from the server to the client, to
help the client to authenticate the server.

In some situations, the server requires the client to supply a *client*
certifiate, to help the server authenticate the client. This seems to be
what you're after. But as Andreas says, I've no idea if/how you can make
outlook supply a *client* certificate.

However, you mention outlook sending a *server* certificate. This sounds
odd - there is no point in sending a server certificate *to* the server.
Recall that the server certificate is essentially public. Anyone who can
send packets to the server can trivially download it.