On Mon, Dec 21, 2009 at 10:58:40AM -0500, Carlos Williams wrote:
> I have TLS / SASL working on my email server. My question is in my
> main.cf on Postfix, I have the following parameter for TLS:
>
> smtpd_tls_security_level = may
>
> In my VIM editor, every parameter except the one listed above is in
> color. The above parameter is just in white.
To fix this problem, disable syntax coloring in VIM. Monochrome ASCII
text works equally well in main.cf.
> I assumed that this was
> because the parameter was not being properly recognized via Postfix.
No, it is because VIM syntax highlighting does not recognize it. VIM
is not Postfix.
> My question is why is it not in color like all the other Postfix
> parameters in VIM?
Ask on the VIM list.
> And lastly, do I need this parameter in my main.cf:
>
> smtp_use_tls = yes
No, you should stop setting it. It is obsolete, and superceded by
smtpd_tls_security_level.
> smtpd_tls_CAfile = /path/to/my/intermediate.crt
Not needed, if you *append* the intermediate certificate to the server
certificate file.
> smtpd_tls_cert_file = /path/to/.crt
> smtpd_tls_key_file = /path/to/.key
> smtpd_tls_loglevel = 1
> smtpd_tls_security_level = may
> smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_tls_cache
> smtpd_tls_session_cache_timeout = 3600s
> tls_random_source = dev:/dev/urandom
Looks good. The key file should be owned by "root", mode 0600 or 0400.
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[email protected]?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
