I have not been able to get any message other then "Client did not present a certificate" in message headers despite loading a Commodo email certificate in to Kmail.
postconf -n alias_maps = hash:/etc/aliases body_checks = pcre:/etc/postfix/pcre_body_checks broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 header_checks = pcre:/etc/postfix/pcre_header_checks html_directory = /etc/postfix/HTML inet_interfaces = 202.89.44.100, localhost local_recipient_maps = $alias_maps, $virtual_mailbox_maps mail_owner = postfix mailbox_size_limit = 20480000 mailq_path = /usr/bin/mailq manpage_directory = /usr/local/man message_size_limit = 10240000 mydestination = $myhostname, localhost.$mydomain, mail.$mydomain, mysql:/etc/postfix/mysql-mydestination.cf myhostname = mail.nettrust.net.nz mynetworks = $config_directory/mynetworks myorigin = $mydomain newaliases_path = /usr/bin/newaliases queue_directory = /var/spool/postfix readme_directory = /etc/postfix/README relay_domains = mysql:/etc/postfix/mysql-relaydomains.cf sample_directory = /etc/postfix/SAMPLE sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtpd_banner = $myhostname ESMTP $mail_name smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, check_recipient_access hash:/etc/postfix/recipient_access, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_unauth_destination, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_path = smtpd smtpd_sasl_security_options = noanonymous smtpd_starttls_timeout = 300s smtpd_tls_ask_ccert = yes smtpd_tls_auth_only = no smtpd_tls_key_file = $smtpd_tls_cert_file smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_security_level = may transport_maps = mysql:/etc/postfix/mysql-transport.cf, hash:/etc/postfix/transport unknown_local_recipient_reject_code = 450 virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf virtual_gid_maps = mysql:/etc/postfix/mysql-gids.cf virtual_mailbox_base = /var/spool/mail virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_minimum_uid = 1000 virtual_uid_maps = mysql:/etc/postfix/mysql-uids.cf