aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDan Fandrich <danf@mageia.org>2024-02-09 10:36:06 -0800
committerDan Fandrich <danf@mageia.org>2024-02-09 10:40:05 -0800
commitf64014e2a3c2431211dda1f6bf9f28eaf56c4536 (patch)
treee4aecfb01e3bf486e9a323282bbb1b5db7a29b0b
parentef8883f73a36ead4c26a42b413baa913c008cfa6 (diff)
downloadpuppet-f64014e2a3c2431211dda1f6bf9f28eaf56c4536.tar
puppet-f64014e2a3c2431211dda1f6bf9f28eaf56c4536.tar.gz
puppet-f64014e2a3c2431211dda1f6bf9f28eaf56c4536.tar.bz2
puppet-f64014e2a3c2431211dda1f6bf9f28eaf56c4536.tar.xz
puppet-f64014e2a3c2431211dda1f6bf9f28eaf56c4536.zip
Enable opportunistic TLS when receiving mail (mga#29514)
-rw-r--r--modules/postfix/templates/main.cf5
1 files changed, 3 insertions, 2 deletions
diff --git a/modules/postfix/templates/main.cf b/modules/postfix/templates/main.cf
index 2322cb71..86ad81c2 100644
--- a/modules/postfix/templates/main.cf
+++ b/modules/postfix/templates/main.cf
@@ -103,8 +103,9 @@ smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (<%= lsbdistid %>)
unknown_local_recipient_reject_code = 450
smtp-filter_destination_concurrency_limit = 2
lmtp-filter_destination_concurrency_limit = 2
-# disabled for the time being
-smtpd_use_tls = no
+# enable opportunistic TLS when receiving
+smtpd_use_tls = yes
+smtpd_tls_received_header = yes
smtpd_tls_cert_file = /etc/ssl/postfix/postfix.crt
smtpd_tls_key_file = /etc/ssl/postfix/postfix.key
smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt