Rosengarten:/etc/postfix/ssl# openssl rsa -in smtpd.key -out smtpd.key.unencrypted
Enter pass phrase for smtpd.key:
writing RSA key
Rosengarten:/etc/postfix/ssl# mv -f smtpd.key.unencrypted smtpd.key
Rosengarten:/etc/postfix/ssl# openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
Generating a 1024 bit RSA private key
....................++++++
......................................................................++++++
writing new private key to 'cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:GE
State or Province Name (full name) [Some-State]:xxxx
Locality Name (eg, city) []:xxxxxx
Organization Name (eg, company) [Internet Widgits Pty Ltd]:xxxx
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:xxxx
Email Address []:xxxxxx
Rosengarten:/etc/postfix/ssl# postconf -e ‘myhostname = Rosengarten’
postconf: fatal: missing '=' after attribute name: "???myhostname"
Rosengarten:/etc/postfix/ssl# postconf -e ‘myhostname=Rosengarten’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_auth_only= no’
postconf: fatal: missing '=' after attribute name: "no???"
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_auth_only=no’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtp_use_tls=yes’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_use_tls=yes’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtp_tls_note_starttls_offer=yes’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_key_file=/etc/postfix/ssl/smtpd.key’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_cert_file=/etc/postfix/ssl/smtpd.crt’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_CAfile=/etc/postfix/ssl/cacert.pem’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_loglevel=1′
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_received_header=yes’
Rosengarten:/etc/postfix/ssl# postconf -e ’smtpd_tls_session_cache_timeout=3600s’
Rosengarten:/etc/postfix/ssl# postconf -e ‘tls_random_source=dev:/dev/urandom’Rosengarten:/etc/postfix/ssl# cat /etc/postfix/main.cf