Now that your certificates are on the filesystem, all that's left is a simple configuration change
within your main.cf in the Postfix directory. Open the file with a suitable text
editor - such as vi, nano, or pico - and add the following lines:
smtpd_use_tls = yes
# smtpd_tls_auth_only = yes <-- Optional
smtpd_tls_key_file = /etc/postfix/private.key
smtpd_tls_cert_file = /etc/postfix/www.yourdomain.com.cer
smtpd_tls_CAfile = /etc/postfix/xroot.crt
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
You can uncomment the smtpd_tls_auth_only line if you want to force all clients
to use TLS encryption. Please remember - any clients without TLS capabilities will be rejected when
they attempt to connect. Also, if you have issues with your installation, increase the
smtpd_tls_loglevel to 3 so that you can see additional debugging information in your
system log.
|
U.S. or 
Canada)
