[Postfixbuch-users] alle paar sekunden ein error ...

[Hans Novak]

Christian Frost schrieb:
> ich habe mir so Zertifikate erstellt:
>
> openssl req -new -x509 -days 365 -nodes -out /etc/postfix/smtp.cert -keyout /etc/postfix/smtp.key
>
> diese sind dann aber nur 365 Tage gültig und müssten dann erneuert werden.
> Pfade sind an den eigenen Geschmack anzupassen.
>   
ok, habe ich auch gemacht, jetzt fehlt mir aber noch das ""cert" file 
(smtp_tls_cert_file)
meine main.cf sieht so aus (der tls part):

# ---------------------- TLS PART START ----------------------
# openssl req -new -x509 -days 365 -nodes -out 
/etc/postfix/tls/smtp.cert -keyout /etc/postfix/tls/smtp.key
smtp_tls_CAfile                 = /etc/postfix/tls/smtp.pem
smtp_tls_cert_file              = /etc/postfix/tls/myserver.crt
smtp_tls_key_file               =  /etc/postfix/tls/smtp.key
smtp_tls_session_cache_database = 
btree:/var/spool/postfix/smtp_tls_session_cache
smtp_tls_security_level = may
#smtpd_tls_CAfile                = /etc/pki/tls/certs/cert.pem
#smtpd_tls_cert_file             = 
/etc/pki/tls/certs/myserver.example.com.crt
#smtpd_tls_key_file              = 
/etc/pki/tls/private/myserver.example.com.key
#smtpd_tls_session_cache_database = 
btree:/var/spool/postfix/smtpd_tls_session_cache
#smtpd_tls_dh1024_param_file     = $config_directory/dh_1024.pem
#smtpd_tls_dh512_param_file      = $config_directory/dh_512.pem
#smtpd_tls_security_level        = may
#smtpd_tls_received_header       = yes
#smtpd_tls_ask_ccert             = yes
#smtpd_tls_loglevel              = 1
#tls_random_source               = dev:/dev/urandom
# ---------------------- TLS PART END ----------------------




Hans