On Fri, Jan 30, 2015 at 11:18:29PM +0000, [email protected] wrote:
> I create on the receiving server this service in http://master.cf
>
> 1234 inet n - n - - smtpd -v
> -o smtp_helo_name=auth.srachnet.loc
> -o smtpd_tls_security_level=may
> -o smtpd_tls_fingerprint_digest=sha1
> -o
> smtpd_client_restrictions=check_ccert_access,lmdb:/etc/postfix/ok_ccerts,reject
> -o smtpd_relay_restrictions=permit_tls_clientcerts,reject
> -o smtpd_data_restrictions=
> -o smtpd_helo_restrictions=
> -o smtpd_recipient_restrictions=
And where is "smtpd_tls_req_ccert=yes" or "smtpd_tls_ask_ccert=yes"?
And why not "smtpd_tls_security_level=encrypt"?
--
Viktor.