Re: Certificate Replacement

2018-04-12 Thread Viktor Dukhovni
> On Apr 12, 2018, at 11:21 PM, Philip Paeps wrote: > > As pointed out, you don't need to restart (and usually don't even need to > reload) Postfix for the new keys and certificates to take effect. > > However: do keep in mind that if you're using DANE and you're replacing

Re: Certificate Replacement

2018-04-12 Thread Philip Paeps
On 2018-04-12 16:25:21 (-0700), Doug Hardie wrote: I am needing to replace the certificate and key. Are they read and cached when postfix starts, or are they read during normal mail handling? In other words, can I replace the files or do I need to do a reload or restart of the service

Re: Certificate Replacement

2018-04-12 Thread Ian R. Bennett
* Viktor Dukhovni (aka postfix-us...@dukhovni.org) used 1.0K on Thu, 12 Apr 2018 at 19:35 -0400 to say: > > > > You'll need to restart postfix. > > That's false. Each smtpd(8) process handles a limited number of > connections ($max_use, default 100) and exits. It also exits when > idle for

Re: Certificate Replacement

2018-04-12 Thread Doug Hardie
> On 12 April 2018, at 16:35, Viktor Dukhovni > wrote: > > > >> On Apr 12, 2018, at 7:29 PM, Ian R. Bennett wrote: >> >>> I am needing to replace the certificate and key. Are they read and >>> cached when postfix starts, or are they read

Re: Certificate Replacement

2018-04-12 Thread Viktor Dukhovni
> On Apr 12, 2018, at 7:29 PM, Ian R. Bennett wrote: > >> I am needing to replace the certificate and key. Are they read and >> cached when postfix starts, or are they read during normal mail >> handling? In other words, can I replace the files or do I need to do >> a

Re: Certificate Replacement

2018-04-12 Thread Doug Hardie
-- Doug > On 12 April 2018, at 16:29, Ian R. Bennett wrote: > > On 2018-04-12 16:25, Doug Hardie wrote: >> I am needing to replace the certificate and key. Are they read and >> cached when postfix starts, or are they read during normal mail >> handling? In other words,

Re: Certificate Replacement

2018-04-12 Thread Ian R. Bennett
On 2018-04-12 16:25, Doug Hardie wrote: I am needing to replace the certificate and key. Are they read and cached when postfix starts, or are they read during normal mail handling? In other words, can I replace the files or do I need to do a reload or restart of the service afterwards?