Cool, thanks... Actually, I finally figured out (by increasing the debug level in the logs) that STARTTLS said it was "missing" the ServerCertFile... Which is odd, cause I didn't change anything, and even on the NEW fresh install, it should have been good, because I was using the DEFAULT auto-generated file... The file had the correct permissions, so I ended up copying and pasting the following line over my old one:
define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')dnl
from one of the web sites I was reading on how to set it up in the first place, and restarted the server and magically it worked... I guess there was some hidden tab or space or something in that line that I couldn't see, I've had that happen before with something else, which is really odd, but it NOW works, so I'm happy... The only thing I noticed, is that the first time I connect with outlook or evolution it tells me the certificate is bad, even though I created it exactly like it told me... but, it still accepts it none the less, and I could care less, as long as it works...
Thanks!
-Tim
I had much the same problem but I was using a modified pem file. In one of the updates the certification file that I had modified by adding my own locally signed cert was happily overwritten without warning.
To get it working I had to go back and add my cert again.
Gerry