> This will write a new 1280-bit RSA key and the corresponding > self-signed certificate with server name "mail.example.com" valid > for ~10 years to the file /etc/postfix/smtpd.pem, which you can > use as the server certificate (and implicitly key) file:
Should I specify it like this? smtpd_tls_cert_file = /etc/postfix/smtpd.pem smtpd_tls_key_file = /etc/postfix/smtpd.pem There is a line from a previous setup: smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem Can I remove it? > Support for elliptic curve cryptography is available with Postfix > 2.6 and OpenSSL 0.9.9 or later. OpenSSL 0.9.8 supports it too. Viktor, thank you so much for your help.