First off, new to the list so, greetings everyone and Happy Holidays.

We had another person managing our mail server and during that time, he
sewt up an SSL cert to manage secure connections. That cert is out of
date and I have been trying to update the cert. I have run the normal
openssl commands to create a new pem file and it resides in
/etc/postfix/ssl. The main.cf file is pointing at this via:

smtp_use_tls = yes
smtpd_tls_security_level = may
#smtpd_tls_auth_only = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
#smtpd_tls_key_file = /usr/share/ssl/certs/cacert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
#smtpd_tls_cert_file = /usr/share/ssl/certs/cacert.pem
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
#smtpd_tls_CAfile = /usr/share/ssl/certs/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

but still it is reading the old file.  I have restarted postfix ( I am
using MailScanner so it is stopped and started using this ) and still it
is reading an old cert. I cannot even find this cert.

I would appreciate any help if someone can direct me as to
troubleshootong and then repairing this problem.

TIA

Dave

Reply via email to