[exim] A little help understanding Exim logging of SSL verif…

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Sebastian Arcus
Ημερομηνία:  
Προς: exim-users
Αντικείμενο: [exim] A little help understanding Exim logging of SSL verification
I was recently digging around the Exim logs searching for a particular
connection attempt. I stumbled over the line below which I can't quite
make sense of:


2024-04-14 10:38:27 [217.175.192.143] SSL verify error (during S-verify
for [45.86.117.1]): certificate name mismatch:
DN="/C=AT/ST=Vienna/L=Vienna/O=Emarsys/OU=systec/CN=smtp.emarsys.net"
H="return1.emarsys.net"

I understand that names in certificates have to match the hostname of
the incoming connection, but I'm not sure why there are two IP addresses
there. Does the above mean Exim is contacting [217.175.192.143] to
verify the certificate for [45.86.117.1]? Technically SSL certificates
are not issued to IP addresses, but hostnames - so I'm a bit stumped. I
searched in Google for "Exim S-verify" - but so far couldn't find
anything that makes sense in the context.

Any hints appreciated



--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/