Postfix 安装SSL证书

一、下载Nginx格式的SSL证书。

yourdomain.com.crt
yourdomain.com.key

二、Postfix配置文件中添加SSL配置参数

smtpd_use_tls=yes
smtpd_tls_security_level = may
smtpd_tls_auth_only = yes
smtpd_tls_cert_file=/etc/ssl/yourdomain.com.crt
smtpd_tls_key_file=/etc/ssl/yourdomain.com.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_protocols=!SSLv2,!SSLv3
smtpd_tls_mandatory_ciphers = medium
tls_medium_cipherlist = AES128+EECDH:AES128+EDH