On Tue, Jan 13, 2009 at 02:37:37PM -0600, Noel Jones wrote:
> Neil wrote:
> >Okay, how can I get SSL enabled/working then?
>
> Uncomment the "smtps" entries in your master.cf
>
> It should looks pretty much like this (beware line wrapping in
> the mail):
> smtps inet n - n - - smtpd
> -o smtpd_tls_wrappermode=yes
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
> -o milter_macro_daemon_name=ORIGINATING
Note, the "SSL" service and (START)"TLS" service are mutually incompatible
on any given port. If submission(587) does STARTTLS, it cannot do "SSL".
If smtps(465) does "SSL" it cannot do STARTTLS. This is not a Postfix
limitation it is a consequence of the design of the two SMTP with
SSL/TLS protocols. Either SMTP is inside TLS or TLS is inside SMTP,
you can't have it both ways.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majord...@postfix.org?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
