> On Mar 23, 2017, at 7:37 AM, Zalezny Niezalezny > <zalezny.niezale...@gmail.com> wrote: > > is it possible to setup separate SSL certificates for an each virtual domain ?
Only by using a separate IP address for each domain and a separate smtpd(8) entry in master.cf. The Postfix smtpd(8) service does not support SNI-based certificate selection. And this is not needed. Just point all the virtual domains at a common MX host with a single certificate. Submission services make for a better use-case of SNI-based certs, but the supporting code has not yet been written. Here too a shared server works, provided you're not hosting domains that want to use a "floating" MSA name so as not to have to ask users to configure their MUAs when they switch providers. -- Viktor.