On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote:
> > What version of Postfix are you using?
>
> postfix/master[7500]: reload -- version 2.6.6, configuration /etc/postfix
That's nearly seven years old. When you enable the Web PKI by
setting smtp_tls_CAfile, that version of Postfix will also drag
in all the default system certificate files.
You can if you wish set:
# postconf -e "import_environment = $(postconf -h import_environment)
SSL_CERT_FILE=/etc/postfix/certfile SSL_CERT_DIR=/etc/postfix/certdir"
and create a corresponding empty file and empty directory. That
will hide the system default locations while you're preparing to
upgrade to something less ancient.
--
Viktor.
