1,868 reputation
526
bio website blog.g3rt.nl
location Delft, Netherlands
age 27
visits member for 2 years, 4 months
seen 2 days ago

FOSS enthousiast, Computer Science student, Debian GNU/Linux (and Ubuntu) user, DevOp with Pupppet powers, Coding in C/C++/Python.

Keywords: Linux, KVM/Libvirt, Puppet, LaTeX, C++, C, Python, Debian, Ubuntu, Apache, Zarafa, Postfix, MySQL, security, KDE, SSL.

Every now and then I'll write an article on those topics my blog.


Other sites I'm active on: Launchpad, Tweakers.net, Twitter, LinkedIn, Google+


Jan
20
awarded  Notable Question
Jan
19
comment Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Your answer is totally valid --thanks! I missed the point of the 'secure' policy, specifically regarding the nexthop meaning. However, the tls_append_default_CA configuration option together with a smtp_tls_CAfile = /path/to/myca.crt appears not to work in Debian at all. I had to supply smtp_tls_CApath = /etc/ssl/certs for system-wide CA certificates to be included.
Jan
19
accepted Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Jan
19
comment Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
'In other words postfix will use next-hop obtained from internal table like transport table.' Ah, that's probably a wrong assumption by me that could be the cause. Will test and report back later today.
Jan
19
awarded  Curious
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 4599 characters in body
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 1125 characters in body
Jan
18
revised Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
added 159 characters in body
Jan
18
asked Postfix SMTP client not verifying against system-wide CA certs with tls_append_default_CA
Jan
14
comment Postfix selectively enforce TLS
From the Postfix documentation on smtpd_enforce_tls: 'With Postfix 2.3 and later use smtpd_tls_security_level instead.' So I guess you can just leave it out. :-)
Dec
18
revised KVM and Libvirt - How do I hotplug a new virtio disk?
use numbered steps, rewrote for better legibility
Dec
17
awarded  Popular Question
Nov
24
awarded  Caucus
Sep
30
awarded  Explainer
Sep
19
awarded  Popular Question
Sep
10
awarded  Yearling
Aug
13
revised How can I let nginx log the used SSL/TLS protocol and ciphersuite?
added example configuration
Aug
13
suggested approved edit on How can I let nginx log the used SSL/TLS protocol and ciphersuite?
Aug
13
accepted How can I let nginx log the used SSL/TLS protocol and ciphersuite?
Aug
13
asked How can I let nginx log the used SSL/TLS protocol and ciphersuite?