Johnny Yao WorkSpace

  所有的新安裝Exchange 2007 & 2010 都會遇到的自簽憑證問題, 且可能每年都會遇到一次, 除非改為內部CA, 且內部CA 到期期限還得先延長, 其中以有起EdgeSync 的架構更新憑證會更麻煩 E2K7 E14   Event Type:    Warning Event Source:    MSExchangeTransport Event Category:    TransportService Event ID:    12015 Date:        10/1/2009 Time:        9:00:57 AM User:        N/A Computer:    mail-hub1 Description: An internal transport certificate expired. Thumbprint:B727A44820E85C4D9A205DAA5316D81C2C3049ED Event Type:    Error Event Source:    MSExchangeTransport Event Category:    TransportService Event ID:    12014 Date:        10/1/2009 Time:        8:55...

Disable TLS (原討論) Reply: I would like to disable TLS, as I would like to disable the encryption between Hub Transport server for some reason. 1. What is the best approach if I have three Hub Transport servers? Mailbox Server A using Hub Transport Server A Mailbox Server B using Hub Transport Server B Mailbox Server C using Hub Transport Server C 1. Disable Opportunistic TLS on your Receive Connectors.  Your Receive Connectors don't "require" TLS either way as -RequireTLS is set to $false.  Opportunistic TLS just attempts TLS first and if TLS is not possible, it accepts the mail anyways. 2. Do have have to disable both "Send Connector" and "Receive Connector" on all Hub Transport servers? 2. No, just Receive Connector due to what I said in #1 . 3. What about Mailbox Servers, do I have to disable it on all Mailbox servers as well? 3. No, all my flows through Hub Transports and gets delivered right to th...

如何停用Exchange 2007 HUB 間的 SMTP TLS? (Part 1)   資料路徑安全性參照 Hub Transport Server 間的所有流量都會使用含有自行簽署憑證的 TLS 進行加密 ，這些憑證是由 Exchange 2007 安裝程式預設安裝的。 Hub Transport Server 之間的流量是使用 Kerberos 驗證來驗證。 選擇輸出匿名 TLS 憑證 Hub Transport Server 之間的 SMTP 工作階段，目的在於只以公開金鑰加密。 對於 Hub Transport Server 之間的通訊，會使用 匿名 TLS 和憑證的公開金鑰來加密工作階段 。但接下來的驗證是 Kerberos 驗證。 在建立 SMTP 工作階段時，接收伺服器會初始化憑證選擇程序，以決定在 TLS 交涉時要使用的憑證。接收伺服器也會執行憑證選擇程序 。 相關的討論 1. Hub Transport routing between servers 2. Disable TLS 3. How to disable Exchange 2007 SMTP X-ANONYMOUSTLS encryption? 4. Exchange 2007 HUB to HUB 传输 傳輸層安全性 在 SMTP 通訊協定交談期間， 用戶端會發出 SMTP STARTTLS 命令 ，來要求針對此工作階段交涉 TLS。用戶端在 TLS 通訊協定交涉過程中會從伺服器接收 X.509 憑證。接著用戶端驗證原則會決定是否應該驗證接收伺服器憑證，以及是否應該將其他任何準則套用至憑證 (如名稱比對)。 TLS 交涉過程中可選擇讓接收伺服器也向傳送伺服器要求憑證。如果傳送伺服器將憑證傳送給接收伺服器，則接收伺服器上的本機原則會決定如何驗證憑證 ，以及因驗證而授與傳送伺服器的權限。 將 TL...