Path: ...!news.roellig-ltd.de!open-news-network.org!weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: groenveld@acm.org (John D Groenveld)
Newsgroups: comp.mail.sendmail
Subject: Re: adding CA certificates (for use by sendmail)
Date: 13 Nov 2024 14:39:49 GMT
Organization: Groenveld.US
Lines: 22
Message-ID: <lpjs1lFp43nU1@mid.individual.net>
References: <87ttcbly3k.fsf@example.com> <vh18n8$oeh$1@tncsrv09.home.tnetconsulting.net>
X-Trace: individual.net X/O8K3yvH20ScgNrg2WYCAOX7io6dc5uyvAv09Xpp/33ZN3AdV
Cancel-Lock: sha1:BEB7QxTALhGg+Ek3pX9YzrXcYV8= sha256:7KWw69kagZN46BKdjemGZR5E6ig/Z4zh/JnNMubOqos=
Bytes: 1601

In article <vh18n8$oeh$1@tncsrv09.home.tnetconsulting.net>,
Grant Taylor  <gtaylor@tnetconsulting.net> wrote:
>I think that you're probably on the correct track.  I speculate that 
>it's a possible mismatch of where Sendmail is looking and where you have 
>your files.

# uname -sr
FreeBSD 15.0-CURRENT
# pkg which /usr/local/share/sendmail/cf/README
/usr/local/share/sendmail/cf/README was installed by package sendmail-8.18.1

# grep CACERT  /usr/local/share/sendmail/cf/README
        define(`confCACERT_PATH', `/etc/mail/certs/')
        define(`confCACERT', `/etc/mail/certs/CA.cert.pem')
confCACERT_PATH         CACertPath      [undefined] Path to directory with
confCACERT              CACertFile      [undefined] File containing at least

The OP can use truss(1) to verify sendmail is using the CACERT_PATH
he thinks it should be using.

John
groenveld@acm.org