This is an old revision of the document!

Postfix StartSSL

generate certificate request

mkdir -p /root/ssl
cd /root/ssl
openssl req -new -newkey rsa:4096 -nodes -keyout mail.nindl.net.key -out mail.nindl.net.csr

Download the StartSSL Bundle

wget https://www.startssl.com/certs/ca-bundle.pem -O startssl-ca-bundle.pem
cp /root/ssl/startssl-ca-bundle.pem /etc/ssl/certs/startssl-ca-bundle.pem

copy keys

cp /root/ssl/mail.nindl.net.key /etc/ssl/private/postfix.pem
cp /root/ssl/mail.nindl.net.crt /etc/ssl/certs/postfix.pem