* on the Thu, Sep 25, 2014 at 03:46:12PM +0000, Viktor Dukhovni wrote:

>> Is it possible to use different TLS certificates for different ports?
>> I'd like to use one for SMTP on port 25, and a different one for
>> submission on ports 587 and 465...
> 
> Yes.
> 
>     main.cf:
>       submission_tls_cert_file = ...
>       submission_tls_key_file = ...
> 
>     master.cf
>       465        inet  n       -       n       -       -       smtpd
>         -o smtpd_tls_wrapper_mode=yes
>         -o smtpd_tls_cert_file=$submission_tls_cert_file
>         -o smtpd_tls_key_file=$submission_tls_key_file
>         ...
>       587        inet  n       -       n       -       -       smtpd
>         -o smtpd_tls_security_level=encrypt
>         -o smtpd_tls_cert_file=$submission_tls_cert_file
>         -o smtpd_tls_key_file=$submission_tls_key_file
>         ...

Thanks, that works perfectly. And also clarifies a lot more about
how Postfix config in general works to me.

-- 
Mike Cardwell  https://grepular.com https://emailprivacytester.com
OpenPGP Key    35BC AF1D 3AA2 1F84 3DC3   B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1   BF1B 295C 3C78 3EF1 46B4

Attachment: signature.asc
Description: Digital signature

Reply via email to