> This will write a new 1280-bit RSA key and the corresponding
> self-signed certificate with server name "mail.example.com" valid
> for ~10 years to the file /etc/postfix/smtpd.pem, which you can
> use as the server certificate (and implicitly key) file:

Should I specify it like this?

smtpd_tls_cert_file = /etc/postfix/smtpd.pem
smtpd_tls_key_file = /etc/postfix/smtpd.pem

There is a line from a previous setup:

smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem

Can I remove it?

> Support for elliptic curve cryptography is available with Postfix
> 2.6 and OpenSSL 0.9.9 or later.

OpenSSL 0.9.8 supports it too.

Viktor, thank you so much for your help.


Reply via email to