Hi, > cat server.cer intermediate.cer > server_chain.cer > > After that in the main.cf you use the server_chain.cer as > smtpd_tls_cert_file. >
my problem is the other direction - I want to verify a remote SMTP server. Postfix is a smtp client in this instance.. TLS verification is required for a larger number of domains in my case. It is certainly possible to do match fingerprint and so on.. but all this is subject to changes and running after these changes and keeping the tls_policy map current is one of my headaches. /r