Hello Viktor, and all.

This is only a partial answer to Viktor last email:

Il giorno lun 10 dic 2018 alle ore 13:56 Viktor Dukhovni
<postfix-us...@dukhovni.org> ha scritto:

> > -r--------. 1 root root     3546 Dec  7 11:59 fullchain1.pem
> > -rw-r--r--. 1 root root     1704 Dec  7 11:59 privkey1.pem
>
> This looks rather odd.  You're keeping your public certificate chain
> protected, but making the keys world-readable???

the setting of privkey to 644 comes from one of Alice's answers (I may
have misinterpreted it, of course, but that is where it comes from).

About all the other suggestions:

This afternoon I have urgent family matters to attend, not sure if I
will able to test and report before tomorrow afternoon about all the
other advice I got so far. Any further comment or tip that comes in
the meantime is welcome,of course. Tonight or tomorrow I will print
out all the answers, and try to re-apply them from scratch, starting
with a new, default configuration file. For now, I want to thank
everybody again for all the hand-holding I am requesting, and will
likely need for a few more days.

In normal circumstances, I would have taken and planned this migration
as a nice occasion to refresh, without hurrying, all my sisadmin
skills. As it went, the server was literally pulled off under my feet,
in a period when, theoretically, I should slow down and focus on
non-work matters. But I need to restore email anyway asap, and right
now it feels as being forced to solve a puzzle without knowing what it
represents...

Later,
Marco

Reply via email to