TLS using processes will eventually pick up new certifictate info. A Postfix SMTP client and server process has a limited life time, bounded by max_idle (100s) and max_use (100 times).
A tlsproxy process (used by postscreen, and by a Postfix SMTP client when reusing an SMTP-over-TLS connection) terminates voluntarily after being idle for max_idle (100s) or after max_idle*max_use seconds, whichever happens first. Thus, atomic updates are desirable (one file instead of multiple files) but "reload" will not be necessary for routine updates. Wietse _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org