Sorry about that, i was thinking your talking about the remote connecting to you. So, it's you to remote ( so the smtp_tls settings )
I did setup also for client myself, but that more how official you need to have some things. Its about the same, for the client setup im using : # TLS Client (outgoing) smtp_tls_key_file = /etc/postfix/newreq.pem smtp_tls_cert_file = /etc/postfix/newcert.pem smtp_tls_CAfile = /etc/postfix/cacert.pem smtp_tls_protocols = !SSLv2,!SSLv3 smtp_tls_ciphers = medium smtp_tls_exclude_ciphers = MD5,SRP,PSK,aDSS,kECDH,kDH,SEED,IDEA,RC2,RC5,RC4 smtp_tls_security_level = may smtp_tls_loglevel = 1 but i do use official certificates and i then i do get the Trusted TLS connection established Maybe a tip, setup lets encrypt certificates, and test with that. Then you can see if you get the needed trusted connections. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: webmas...@lshipping.info [mailto:owner-postfix-us...@postfix.org] > Namens Den1 > Verzonden: woensdag 29 maart 2017 14:50 > Aan: postfix-users@postfix.org > Onderwerp: RE: Postfix cannot start tls: handshake failure > > Hi Louis, > > Thank you for your input, I appreciate. I have smtpd running OK with all > the > key_file, cert_file and so on. I was asking about smtp. These two are > different :-) > > > > > > -- > View this message in context: > http://postfix.1071664.n5.nabble.com/Postfix-cannot-start-tls-handshake- > failure-tp89684p89731.html > Sent from the Postfix Users mailing list archive at Nabble.com.