1.编译安装
- 编译安装openss【卸载原有openssl，然后下载新的安装，因为postfix需要新版本openssl】
- 编译安装postfix,下面这行命令
make -f Makefile.init makefiles CCARGS="-DHAS_MYSQL -I/www/server/mysql/include -DUSE_SASL_AUTH -I/usr/include/sasl -DUSE_CYRUS_SASL -DUSE_TLS -I/usr/local/openssl/include" AUXLIBS="-L/www/server/mysql/lib -Wl,-rpath,/www/server/mysql/lib -lmysqlclient -lz -lm -lsasl2 -L/usr/local/openssl/lib64 -lssl -lcrypto"
2.生成tls证书
本地使用openssl命令生成 或者 直接去阿里云申请免费ssl证书
3.修改main.cf配置
smtpd_tls_cert_file = /etc/postfix/tls/kevlin.true.work_public.crt
smtpd_tls_key_file = /etc/postfix/tls/kevlin.true.work.key
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtp_tls_security_level = may
smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_ciphers = high
