Hi,

> cat server.cer intermediate.cer > server_chain.cer
> 
> After that in the main.cf you use the server_chain.cer as
> smtpd_tls_cert_file.
> 

my problem is the other direction - I want to verify a remote SMTP
server. Postfix is a smtp client in this instance.. TLS verification is
required for a larger number of domains in my case.

It is certainly possible to do match fingerprint and so on.. but all
this is subject to changes and running after these changes and keeping
the tls_policy map current is one of my headaches.

/r

Reply via email to