Re: Offering STARTTLS in postfix. need help!

2018-01-15 Thread Viktor Dukhovni
> On Jan 15, 2018, at 11:01 PM, Benny Pedersen wrote: > > common praksis is imap.example.org and smtp.example.org with a wildcard > signed cert for *.example.org The rule is: there are no rules. TLS in SMTP is largely unauthenticated opportunistic TLS, and the content of the certificate is i

Re: Offering STARTTLS in postfix. need help!

2018-01-15 Thread Sean Son
On Mon, Jan 15, 2018 at 11:01 PM, Benny Pedersen wrote: > Sean Son skrev den 2018-01-16 04:49: > > Is it possible to use a Wildcard cert with Postfix? Or does it have to >> be a cert for an exact FQDN? >> > > both is supported in openssl > > common praksis is imap.example.org and smtp.example.org

Re: Offering STARTTLS in postfix. need help!

2018-01-15 Thread Benny Pedersen
Sean Son skrev den 2018-01-16 04:49: Is it possible to use a Wildcard cert with Postfix? Or does it have to be a cert for an exact FQDN? both is supported in openssl common praksis is imap.example.org and smtp.example.org with a wildcard signed cert for *.example.org

Re: Offering STARTTLS in postfix. need help!

2018-01-15 Thread Sean Son
Hello all Is it possible to use a Wildcard cert with Postfix? Or does it have to be a cert for an exact FQDN? Thanks! On Fri, Jan 12, 2018 at 4:35 PM, Sean Son wrote: > > > On Fri, Jan 12, 2018 at 4:06 PM, Viktor Dukhovni < > postfix-us...@dukhovni.org> wrote: > >> >> >> > On Jan 12, 2018, at

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Sean Son
On Fri, Jan 12, 2018 at 4:06 PM, Viktor Dukhovni wrote: > > > > On Jan 12, 2018, at 3:55 PM, Sean Son > wrote: > > > > By default, TLS is disabled in the Postfix SMTP server, so no difference > to plain Postfix is visible. Explicitly switch it on with > "smtpd_tls_security_level = may". > > > >

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Viktor Dukhovni
> On Jan 12, 2018, at 3:55 PM, Sean Son > wrote: > > By default, TLS is disabled in the Postfix SMTP server, so no difference to > plain Postfix is visible. Explicitly switch it on with > "smtpd_tls_security_level = may". > > Example: > > /etc/postfix/main.cf > : > > smtpd_tls_secur

RE: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Fazzina, Angelo
fix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Philip Paeps Sent: Friday, January 12, 2018 3:49 PM To: postfix-users@postfix.org Subject: Re: Offering STARTTLS in postfix. need help! On 2018-01-12 15:45:33 (-0500), Sean Son wrote: >How does one configure an internet facin

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Sean Son
On Fri, Jan 12, 2018 at 3:48 PM, Philip Paeps wrote: > On 2018-01-12 15:45:33 (-0500), Sean Son wrote: > >> How does one configure an internet facing Postfix SMTP mail relay server, >> to offer STARTTLS? I have been googling around and seeing various >> different articles and blog entries, but I

Re: Offering STARTTLS in postfix. need help!

2018-01-12 Thread Philip Paeps
On 2018-01-12 15:45:33 (-0500), Sean Son wrote: How does one configure an internet facing Postfix SMTP mail relay server, to offer STARTTLS? I have been googling around and seeing various different articles and blog entries, but I cannot figure out what is the quickest and easiest way to do so