Doing verification for Hirsute:
root@hirsute:/home/ubuntu# apt install postfix/hirsute-proposed Reading package lists... Done Building dependency tree... Done Reading state information... Done Selected version '3.5.6-1ubuntu0.2' (Ubuntu:21.04/hirsute-proposed [amd64]) for 'postfix' [...] Creating /etc/postfix/dynamicmaps.cf changing /etc/mailname to hirsute.lxd [...] Created symlink /etc/systemd/system/multi-user.target.wants/postfix.service → /lib/systemd/system/postfix.service. [...]
root@hirsute:/home/ubuntu# root@hirsute:/home/ubuntu# posttls-finger mx.dmz.tait.net.nz posttls-finger: Connected to mx.dmz.tait.net.nz[114.23.142.178]:25 posttls-finger: < 220 mx.tait.net.nz ESMTP Postfix (Ubuntu) posttls-finger: > EHLO hirsute.lxd posttls-finger: < 250-mx.tait.net.nz posttls-finger: < 250-PIPELINING posttls-finger: < 250-SIZE 20480000 posttls-finger: < 250-STARTTLS posttls-finger: < 250-ENHANCEDSTATUSCODES posttls-finger: < 250-8BITMIME posttls-finger: < 250-SMTPUTF8 posttls-finger: < 250 CHUNKING posttls-finger: > STARTTLS posttls-finger: < 220 2.0.0 Ready to start TLS posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25: subjectAltName: mx.tait.net.nz posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25 CommonName mx.tait.net.nz posttls-finger: certificate verification failed for mx.dmz.tait.net.nz[114.23.142.178]:25: untrusted issuer /CN=Nick's Domain CA posttls-finger: mx.dmz.tait.net.nz[114.23.142.178]:25: subject_CN=mx.tait.net.nz, issuer_CN=Nick's Domain CA, fingerprint=FD:88:18:3D:9D:33:4C:0B:B8:F9:E8:64:4B:23:D6:05:F1:DB:8D:21, pkey_fingerprint=03:6B:E4:D3:73:82:D5:B4:EB:98:96:BB:56:77:A2:48:C2:73:A0:03 posttls-finger: Untrusted TLS connection established to mx.dmz.tait.net.nz[114.23.142.178]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 posttls-finger: > EHLO hirsute.lxd posttls-finger: < 250-mx.tait.net.nz posttls-finger: < 250-PIPELINING posttls-finger: < 250-SIZE 20480000 posttls-finger: < 250-ENHANCEDSTATUSCODES posttls-finger: < 250-8BITMIME posttls-finger: < 250-SMTPUTF8 posttls-finger: < 250 CHUNKING posttls-finger: > QUIT posttls-finger: < 221 2.0.0 Bye root@hirsute:/home/ubuntu#
It's OK.
Doing verification for Hirsute:
root@hirsute: /home/ubuntu# apt install postfix/ hirsute- proposed 21.04/hirsute- proposed [amd64]) for 'postfix' dynamicmaps. cf system/ multi-user. target. wants/postfix. service → /lib/systemd/ system/ postfix. service.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '3.5.6-1ubuntu0.2' (Ubuntu:
[...]
Creating /etc/postfix/
changing /etc/mailname to hirsute.lxd
[...]
Created symlink /etc/systemd/
[...]
root@hirsute: /home/ubuntu# /home/ubuntu# posttls-finger mx.dmz.tait.net.nz tait.net. nz[114. 23.142. 178]:25 TUSCODES tait.net. nz[114. 23.142. 178]:25: subjectAltName: mx.tait.net.nz tait.net. nz[114. 23.142. 178]:25 CommonName mx.tait.net.nz tait.net. nz[114. 23.142. 178]:25: untrusted issuer /CN=Nick's Domain CA tait.net. nz[114. 23.142. 178]:25: subject_ CN=mx.tait. net.nz, issuer_CN=Nick's Domain CA, fingerprint= FD:88:18: 3D:9D:33: 4C:0B:B8: F9:E8:64: 4B:23:D6: 05:F1:DB: 8D:21, pkey_fingerprin t=03:6B: E4:D3:73: 82:D5:B4: EB:98:96: BB:56:77: A2:48:C2: 73:A0:03 tait.net. nz[114. 23.142. 178]:25: TLSv1.3 with cipher TLS_AES_ 256_GCM_ SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 TUSCODES /home/ubuntu#
root@hirsute:
posttls-finger: Connected to mx.dmz.
posttls-finger: < 220 mx.tait.net.nz ESMTP Postfix (Ubuntu)
posttls-finger: > EHLO hirsute.lxd
posttls-finger: < 250-mx.tait.net.nz
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-SIZE 20480000
posttls-finger: < 250-STARTTLS
posttls-finger: < 250-ENHANCEDSTA
posttls-finger: < 250-8BITMIME
posttls-finger: < 250-SMTPUTF8
posttls-finger: < 250 CHUNKING
posttls-finger: > STARTTLS
posttls-finger: < 220 2.0.0 Ready to start TLS
posttls-finger: mx.dmz.
posttls-finger: mx.dmz.
posttls-finger: certificate verification failed for mx.dmz.
posttls-finger: mx.dmz.
posttls-finger: Untrusted TLS connection established to mx.dmz.
posttls-finger: > EHLO hirsute.lxd
posttls-finger: < 250-mx.tait.net.nz
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-SIZE 20480000
posttls-finger: < 250-ENHANCEDSTA
posttls-finger: < 250-8BITMIME
posttls-finger: < 250-SMTPUTF8
posttls-finger: < 250 CHUNKING
posttls-finger: > QUIT
posttls-finger: < 221 2.0.0 Bye
root@hirsute:
It's OK.