Re: create keys and certificates for postfix/tls

[Lucius Rizzo <lucius.rizzo%mail.edu.ky@localhost>]

You have a few options. All involve the use of openssl to generate key or csr

See https://www.madboa.com/geek/openssl/

1. Create a self signed cert and point Postfix to use ssl key and pem which was self generated
2. Use letsencrypt (HIGHLY recommended). IMHO, the introduction of letsencrypt will kill the basic ssl cert signed market.
3. Get a signed cert from namecheap. (You can alway buy a throwaway domain and add positivessl cert for a year for US $1.99

________________________________________
From: netbsd-users-owner%NetBSD.org@localhost <netbsd-users-owner%NetBSD.org@localhost> on behalf of Marco Beishuizen <mbeis%xs4all.nl@localhost>
Sent: Sunday, February 28, 2016 5:35 PM
To: netbsd-users%netbsd.org@localhost
Subject: create keys and certificates for postfix/tls

Hi,

I'm trying to make Postfix work with TLS enabled. Looks like I need some
certificates and keys. How do create them on NetBSD 7.0?

Thanks in advance,
Marco

--
You've been leading a dog's life.  Stay off the furniture.