Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

Vulcans do not approve of violence. -- Spock, "Journey to Babel", stardate 3842.4


computers / comp.mail.sendmail / using different certificates for different ip's possible

SubjectAuthor
* using different certificates for different ip's possibleNone
`- using different certificates for different ip's possibleClaus Aßmann

1
using different certificates for different ip's possible

<timsfj$3pvjf$1@dont-email.me>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=1412&group=comp.mail.sendmail#1412

  copy link   Newsgroups: comp.mail.sendmail
Path: i2pn2.org!i2pn.org!eternal-september.org!reader01.eternal-september.org!.POSTED!not-for-mail
From: hzcnjkx656@tormails.com (None)
Newsgroups: comp.mail.sendmail
Subject: using different certificates for different ip's possible
Date: Tue, 18 Oct 2022 20:49:21 +0200
Organization: A noiseless patient Spider
Lines: 4
Message-ID: <timsfj$3pvjf$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 18 Oct 2022 18:49:24 -0000 (UTC)
Injection-Info: reader01.eternal-september.org; posting-host="ff6516fa889ea6b61fcc975ac03ba770";
logging-data="3997295"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+5svMrAz2KMDUcEqnEk9bwhZURxfCOIEW5yFa0aCtQdA=="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
Thunderbird/91.5.1
Cancel-Lock: sha1:gaPMhJ+anRpJZjU+gedVf/6zC2o=
Content-Language: en-US
 by: None - Tue, 18 Oct 2022 18:49 UTC

I was wondering if it is possible to use different crt/key per used ip
address. So eg. for the public facing ip a different one than the local
ip with one of the custom ca.

Re: using different certificates for different ip's possible

<tio2ri$rg2$1@news.misty.com>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=1413&group=comp.mail.sendmail#1413

  copy link   Newsgroups: comp.mail.sendmail
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!.POSTED.veps.esmtp.org!not-for-mail
From: INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org (Claus Aßmann)
Newsgroups: comp.mail.sendmail
Subject: Re: using different certificates for different ip's possible
Date: Wed, 19 Oct 2022 01:44:18 -0400 (EDT)
Organization: MGT Consulting
Sender: <ml+sendmail(-no-copies-please)@esmtp.org>
Message-ID: <tio2ri$rg2$1@news.misty.com>
References: <timsfj$3pvjf$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Wed, 19 Oct 2022 05:44:18 -0000 (UTC)
Injection-Info: news.misty.com; posting-host="veps.esmtp.org:155.138.203.148";
logging-data="28162"; mail-complaints-to="abuse@misty.com"
Mail-Copies-To: never
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: ca@x2.esmtp.org (Claus Assmann)
 by: Claus Aßmann - Wed, 19 Oct 2022 05:44 UTC

None wrote:
> I was wondering if it is possible to use different crt/key per used ip
> address. So eg. for the public facing ip a different one than the local
> ip with one of the custom ca.

You could run different MTA instances (with their own cf files) for
different IPs.

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.

1
server_pubkey.txt

rocksolid light 0.9.81
clearnet tor