Hello:
On a sendmail server, i enter command /usr/lib/sendmail -bt -d0, it
shows:
Version 8.13.7+Sun
Compiled with: DNSMAP LDAPMAP LOG MAP_REGEX MATCHGECOS MILTER MIME7TO8
MIME8TO7 NAMED_BIND NDBM NETINET NETINET6 NETUNIX NEWDB NIS
NISPLUS PIPELINING SCANF STARTTLS TCPWRAPPERS USERDB
USE_LDAP_INIT XDEBUG

============ SYSTEM IDENTITY (after readcf) ============
(short domain name) $w = sendmail_server
(canonical domain name) $j = sendmai_server.mydomain.com
(subdomain name) $m = mydomain.com
(node name) $k = sendmail_server

Another command # telnet localhost smtp does not show STARTTLS:
220 sendmail_server.mydomain.com ESMTP Sendmail 8.13.7+Sun/8.13.3;
Tue, 11 Mar 2008 13:17:05 -0400 (EDT)
ehlo localhost
250-sendmial_server.mydomain.com Hello localhost [127.0.0.1], pleased
to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-DELIVERBY
250

Is TLS up and running on this Solaris server?
O/S: 5.10 Generic_118833-24
Thanks.
Warren

warren.liang@gmail.com unleashed the infinite monkeys on 20/03/2008
17:58 producing:
<---SNIP--->
> Another command # telnet localhost smtp does not show STARTTLS:
> 220 sendmail_server.mydomain.com ESMTP Sendmail 8.13.7+Sun/8.13.3;
> Tue, 11 Mar 2008 13:17:05 -0400 (EDT)
> ehlo localhost
> 250-sendmial_server.mydomain.com Hello localhost [127.0.0.1], pleased
> to meet you
> 250-ENHANCEDSTATUSCODES
> 250-PIPELINING
> 250-EXPN
> 250-VERB
> 250-8BITMIME
> 250-SIZE
> 250-DSN
> 250-ETRN
> 250-DELIVERBY
> 250
>
> Is TLS up and running on this Solaris server?

If it was you would see "STARTTLS" in the "Compiled with" section AND
"250-STARTTLS" in the response to the EHLO. This suggests that while
your binary is build with TLS, your sendmail config is missing the
required entries.

The cf/README file has a section titled "STARTTLS" that details what you
need.

--
Rob MacGregor (BOFH)

Rule 37: "There is no 'overkill'. There is only 'open fire'
and 'I need to reload.'"