I am really confused about the postfix TLS settings. There are in each case settings for private keys and public keys.
smtpd_tls_cert_file =
smtpd_tls_key_file =
smtpd_*
And
smtp_tls_cert_file =
smtp_tls_key_file =
smtp_*
What is their difference.
I know of three different TLS cases:
- User authenticates on MTA in oder to sent mails
- MTA wants to send an email encrypted to another MTA
- MTA receives an email encrypted from another MTA
Do they relate to the above settings? Are there any other cases that require TLS? Which of the cases belong to what postfix configuration directive?
Update
Thanks to @Michael Hampton, I got most of it now. What still remains is the client part:
What is the reason/use-case for setting postfix client certificate/key (smtp_tls_cert
and smtp_tls_key
). Why would I need this and what benefits do I have?