Hi,

I found this in my maillog ( Sendmail 8.12.11/8.12.11)

---
Jul 3 18:00:36 server sendmail[2041]: STARTTLS=client, relay=mail.xxxxxxx.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
---

In my sendmail.mc, all TLS related lines are commented
-------
dnl #### define(`CERT_DIR',`/etc/mail/certs')
dnl #### define(`confCACERT_PATH',`CERT_DIR')
dnl #### define(`confCACERT',`CERT_DIR/cacert.pem')
dnl #### define(`confSERVER_CERT',`CERT_DIR/cert.pem')
dnl #### define(`confSERVER_KEY',`CERT_DIR/key.pem')
dnl #### define(`confCLIENT_CERT',`CERT_DIR/cert.pem')
dnl #### define(`confCLIENT_KEY',`CERT_DIR/key.pem')
-------

But still I see Sendmail doing a Cert verification.

How can I disable this ? What am I missing?
Please advice.

Thx
Vai

Its not your side that advertised STARTTLS in this case the remote side did, and sendmail will always use TLS if the remote side advertises it.

The only method i know of disabling it is on a per domain basis in you access db using the Try_TLS option

in this case you need an entry like this