stabilization intermediate check-in

etc-zntrl/postfix/main.cf

@@ -35,19 +35,20 @@ virtual_transport = lmtp:dagent:2003
 default_transport = smtp:[relay.zntrl.de]:465
 
 # SMTPD (inbound) TLS parameters
-smtpd_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtpd_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtpd_tls_CApath = /etc/ssl/certs
-smtpd_tls_CAfile = /etc/postfix/ssl/certs/balusign-signing-ca.pem
-smtpd_tls_security_level=may
+smtpd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
+smtpd_tls_key_file = /etc/ssl/private/zntrl.key
+smtpd_tls_cert_file = /etc/ssl/zntrl.crt
+smtpd_tls_security_level = may
 smtpd_tls_loglevel = 1
 
 smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
 
 # SMTP (outbound)
-smtp_tls_key_file = /etc/postfix/ssl/private/nuc0.lan.key
-smtp_tls_cert_file = /etc/postfix/ssl/nuc0-full-chain.pem
 smtp_tls_CApath=/etc/ssl/certs
+smtd_tls_CAfile = /usr/local/share/ca-certificates/kopano-ca.crt
+smtd_tls_key_file = /etc/ssl/private/zntrl.key
+smtd_tls_cert_file = /etc/ssl/zntrl.crt
 smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
 smtp_tls_wrappermode = yes
 smtp_tls_security_level = encrypt

etc-zntrl/postfix/relay_clientcerts

@@ -1,2 +1,3 @@
-57:6c:b5:f6:49:0e:9d:62:cc:c5:63:80:e5:64:58:ed relay.de
-d4:16:18:1e:21:37:45:fa:a9:ad:d7:7f:0c:37:8f:7c zntrl.de
+59:60:7e:df:d6:b9:96:2a:38:b3:71:a2:7b:5d:bc:44 relay
+14:38:ee:53:a2:9f:7d:3a:75:f3:e7:11:99:dd:85:5d zntrl
+3b:ad:6d:65:38:a9:0a:63:89:41:3a:95:96:e0:e6:65 baloghs