[postfix-es] Problema con Certificados SSL

[Victor Scarpin]

Hola,

 

Estoy teniendo un problema con el certificado de SSL para recibir correos
con el postfix de algunos dominios en OpenSuse.

Necesitaría saber si hay algún comando para verificar si el certificado SSL
caduco o no.

 

mail:/var/log # openssl s_client -connect www.bagsa.com.ar:25 -crlf
-starttls smtp

CONNECTED(00000003)

depth=0 /C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

verify error:num=18:self signed certificate

verify return:1

depth=0 /C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

verify return:1

---

Certificate chain

 0 s:/C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

   i:/C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

---

Server certificate

-----BEGIN CERTIFICATE-----

MIIChTCCAe4CCQDinOOvJm/+lDANBgkqhkiG9w0BAQUFADCBhjELMAkGA1UEBhMC

QVIxCzAJBgNVBAgTAkJBMREwDwYDVQQHEwhMYSBQbGF0YTEOMAwGA1UEChMFQmFn

c2ExETAPBgNVBAsTCHNpc3RlbWFzMQ4wDAYDVQQDEwViYWdzYTEkMCIGCSqGSIb3

DQEJARYVc2lzdGVtYXNAYmFnc2EuY29tLmFyMB4XDTA3MTIwNTE4NDkwNVoXDTE3

MTIwMjE4NDkwNVowgYYxCzAJBgNVBAYTAkFSMQswCQYDVQQIEwJCQTERMA8GA1UE

BxMITGEgUGxhdGExDjAMBgNVBAoTBUJhZ3NhMREwDwYDVQQLEwhzaXN0ZW1hczEO

MAwGA1UEAxMFYmFnc2ExJDAiBgkqhkiG9w0BCQEWFXNpc3RlbWFzQGJhZ3NhLmNv

bS5hcjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA01DIstEFF873Ytho1rOQ

eMMbqW4olEjN2prcDh2qwvTR26h3gDnbch9hoVJbPuBL5A6y0rzABZn4qyfsUyA5

77tkRq1kCfJeaO6lhJVcNHMy0ItmFGVquAtlS1tuSdB6+acLWhWdZp87eKK1UCSh

XQgqS2uUWn4PD/gPYax3zR0CAwEAATANBgkqhkiG9w0BAQUFAAOBgQA5bvmFAVe+

YrgUKy1JIEPQhHKw4Jj51bk5+nkgpywU8f2nlmWEq+bc8oHlMVf+mS3eCwLId25A

0+DbhFBaVq0RYjdBBoe9/vwVw5pDP2YCuBuQlYCEGnn379ASflWAvg3NWM4Oqaf+

3YJHdnVdekROz/b4wH8zKP0jQ8SJ2Bi5ZA==

-----END CERTIFICATE-----

subject=/C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

issuer=/C=AR/ST=BA/L=La
Plata/O=Bagsa/OU=sistemas/CN=bagsa/emailAddress=sistemas en bagsa.com.ar

---

No client certificate CA names sent

---

SSL handshake has read 1274 bytes and written 350 bytes

---

New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA

Server public key is 1024 bit

Compression: NONE

Expansion: NONE

SSL-Session:

    Protocol  : TLSv1

    Cipher    : DHE-RSA-AES256-SHA

    Session-ID:
6C72C389FBEFAC01A944DFDEE3E85A6E95FB4CA437CA7D0A2913A6E8D6ADB1F3

    Session-ID-ctx:

    Master-Key:
B09ECA3CFFDCFB81F60B3E537E2F6FD1363C854AF5BC6DCE9840321B8CAE476DAC4C5301BC72
68A7C2FC015E91A933D9

    Key-Arg   : None

    Start Time: 1258732486

    Timeout   : 300 (sec)

    Verify return code: 18 (self signed certificate)

---

------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://lists.wl0.org/pipermail/postfix-es/attachments/20091123/4a671684/attachment.html>