> On Fri, Sep 25, 2015 at 07:21:32PM +0300, Michael Peter wrote: > >> > What version of Postfix are you using? >> >> postfix/master[7500]: reload -- version 2.6.6, configuration >> /etc/postfix > > That's nearly seven years old. When you enable the Web PKI by > setting smtp_tls_CAfile, that version of Postfix will also drag > in all the default system certificate files. > > You can if you wish set: > > # postconf -e "import_environment = $(postconf -h import_environment) > SSL_CERT_FILE=/etc/postfix/certfile SSL_CERT_DIR=/etc/postfix/certdir" > > and create a corresponding empty file and empty directory. That > will hide the system default locations while you're preparing to > upgrade to something less ancient.
This explains every thing is detail. Just for info, How can i know the default locations for default system certificates which postfix drag when setting smtp_tls_CAfile ? Thanks again. Michael Peter
