On Thu, Dec 23, 2010 at 12:43:44PM -0500, Dave Filchak wrote:
> Well ... OK then: sorry, I am not overly expert in managing the server
> and am learning as I go so please bear with me.
>
> Here is the output from postconf -n
> smtp_tls_note_starttls_offer = yes
> smtp_use_tls = yes
> smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
> smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
> smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
> smtpd_tls_loglevel = 1
> smtpd_tls_received_header = yes
> smtpd_tls_security_level = may
> smtpd_tls_session_cache_timeout = 3600s
The cert and key used by your SMTP server will be those found in
/etc/postfix/ssl/smtpd.pem. How many certificates and keys does
this file contain?
> So again, you will notice the path to the CAfile, cert file and key
> file. However, what the server seems to be reading is files found under
> /etc/ssl/certs. Here is a listing:
>
> -rw-r--r-- 1 root root 517 Sep 25 2006 dovecot.cnf
> -rw-r--r-- 1 root root 1066 Sep 25 2006 dovecot.crt
> -rw-r--r-- 1 root root 891 Sep 25 2006 dovecot.key
> -rw-r--r-- 1 root root 1070 Aug 1 2006 dovecot.pem
This would be read by your IMAP server. Are you expecting Postfix
to be your IMAP server? It is not.
Postfix is an SMTP server, not an IMAP server. To refresh your IMAP
server certificates, adjust your Dovecot configuration.
--
Viktor.
