Artemy Tregubenko: > Is tls_append_default_CA expected to work when none of *CApath and *CAfile > are set?
As per the documentation, Postfix APPENDS to certificates in *CApath or *CAfile. If you don't specify certificates in *CApath and *CAfile, then Postfix won't append to them. Wietse