> > Create the .db file with postmap. > postmap hash:relay_clientcerts >
thanks for the hint! I did it and it almost worked. Almost, because the smtp server asked me for a certificate, but i can still send messages with my MUA with no certificate (or with a non-registered certificate). Which option should i change ? I thought it was relay_clientcerts, i tried smtpd_client_restrictions too (i don't want to remove the option permit_sasl_authentication, i just add check_ccert_access hash:/etc/postfix/relay_clientcerts). Thanks.