I have been tasked with implementing TLS on a Postfix email relay server for an international office.
I am aware that I need to modify '/etc/postfix/main.cf' to setup TLS. We have another email relay server in the US that is setup with TLS and has the following TLS config:
# TLS parameters 'mail.company-name.com'
smtpd_tls_cert_file=/etc/ssl/certs/company-name.com.pem
smtpd_tls_key_file=/etc/ssl/private/company-name.com.key
smtpd_use_tls=yes
smtp_tls_loglevel=5
smtpd_tls_security_level=may
smtp_tls_note_starttls_offer=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
I can implement this configuration on my international office's Postfix server, so I am just wondering if all I have left to do is generate a certificate for 'mail.company-name.in' similar to the certificate that is referenced in the following lines:
smtpd_tls_cert_file=/etc/ssl/certs/company-name.com.pem
smtpd_tls_key_file=/etc/ssl/private/company-name.com.key
The new configuration would be as follows:
# TLS parameters 'mail.company-name.in'
smtpd_tls_cert_file=/etc/ssl/certs/company-name.in.pem
smtpd_tls_key_file=/etc/ssl/private/company-name.in.key
smtpd_use_tls=yes
smtp_tls_loglevel=5
smtpd_tls_security_level=may
smtp_tls_note_starttls_offer=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
Am I missing anything else that you may have noticed? Any advice will be appreciated.
Please let me know if you have any questions and I will be happy to clarify.
Thank you for your help!