Ok, didn't fully understand some of what you've said, so I'll just post what I see (no hexadecimal symlinks found). I've changed smtpd_tls_CApath to /etc/pki/ca-trust/extracted/pem but that hasn't made any difference
[root@indium tls]# openssl version -d OPENSSLDIR: "/etc/pki/tls" [root@indium tls]# [root@indium tls]# ls -al /etc/pki/tls total 12 drwxr-xr-x. 5 root root 81 Jan 24 16:41 . drwxr-xr-x. 9 root root 103 Jan 26 20:18 .. lrwxrwxrwx. 1 root root 49 Nov 27 21:00 cert.pem -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem drwxr-xr-x. 2 root root 97 Dec 21 17:31 certs drwxr-xr-x. 2 root root 6 Nov 6 08:24 misc -rw-r--r--. 1 root root 10841 Nov 6 08:20 openssl.cnf drwxr-xr-x. 2 root root 60 Dec 21 17:32 private [root@indium tls]# [root@indium tls]# ls -al /etc/pki/ca-trust/extracted/pem total 396 drwxr-xr-x. 2 root root 101 Dec 18 15:19 . drwxr-xr-x. 5 root root 58 Dec 18 15:19 .. -r--r--r--. 1 root root 179176 Dec 18 15:19 email-ca-bundle.pem -r--r--r--. 1 root root 0 Dec 18 15:19 objsign-ca-bundle.pem -rw-r--r--. 1 root root 898 Nov 27 20:58 README -r--r--r--. 1 root root 219895 Dec 18 15:19 tls-ca-bundle.pem
