Am 19.02.2015 um 13:22 schrieb John:
On 2/19/2015 6:49 AM, Richard James Salts wrote:
On Thu, 19 Feb 2015 06:32:29 John wrote:
On 2/16/2015 10:29 PM, Viktor Dukhovni wrote:
smtp_tls_cert_file = /root/ssl/certs/$mydomain.mail.pem
smtp_tls_key_file = /root/ssl/private/$mydomain.mail.key
Are there any destinations for which you need client certs to gain
access? If not set these empty.
I thought these were needed for TLS.
I must be a /little/ confused. Is it the sender or the receiver that
initiates TLS?
From your comment to remove them, it must be the receiver, correct?
These settings are saying to use a specific certificate when
connecting to
another server with a specific client certificate where mutual trust
is needed,
e.g. where you were connecting to a smarthost that used the
certificate to
authenticate you.
So we are talking about MTA to MTA connectivity. ??
surely and you should know that when you touch a setting
http://www.postfix.org/smtp.8.html
http://www.postfix.org/smtpd.8.html