On Tue, Oct 28, 2008 at 09:34:11AM +0900, Byung-Hee HWANG wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Noel Jones wrote: > > This should have all the information you need: > > http://www.postfix.org/TLS_README.html > > > > If you have specific questions after reading the above, please see: > > http://www.postfix.org/DEBUG_README.html#mail > > > Ah Noel, thank you quick reply. After Google, a few hours ago i found > out what i need really: > <URL:http://koti.kapsi.fi/ptk/postfix/postfix-tls-cacert.shtml>.
This recommends making your private key group readable by the "postfix" group. This advice is neither necessary, nor a good idea. Private keys should belong to "root" and be readable (mode 0600) only by root. Postfix loads private keys before dropping privs. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:[EMAIL PROTECTED]> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.