Learn about Centmin Mod LEMP Stack today
Register Now

Master Branch postfix opportunistic TLS encryption for outgoing server mail

Discussion in 'Centmin Mod Github Commits' started by eva2000, Sep 14, 2015.

  1. eva2000

    eva2000 Administrator Staff Member

    55,237
    12,253
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,833
    Local Time:
    6:03 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    postfix opportunistic TLS encryption for outgoing server mail

    enable by default on initial installs postfix opportunistic TLS encryption for outgoing server emails as per http://www.postfix.org/TLS_README.html#client_tls_may

    for existing users they can implement this via SSH command line using the following commands where first command checks current default postfix values which usually is empty and the last command checks the customised postfix config settings after

    postconf -d smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database
    postconf -e 'smtp_tls_CAfile=/etc/pki/tls/certs/ca-bundle.crt'
    postconf -e 'smtp_tls_security_level = may'
    postconf -e 'smtp_tls_loglevel = 1'
    postconf -e 'smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache'
    service postfix reload
    postconf -n smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database

    Continue reading...

    Centmin Mod Github Master branch


    Master branch is where most recent commits are made as at May 24, 2015.