I found a blog that helped me relay postfix through smtp.gmail.com with SASL authentication. One of the steps was:
cat /etc/ssl/certs/Thawte_Premium_Server_CA.pem | \ sudo tee -a /etc/postfix/smtp_cacert.pem
When I read something like this, I get a little concerned, because I'm not entirely sure what happens if I append the Thawte
.pem to mine. I built the
openssl req -new -x509 -days 365 -nodes -out smtp_cacert.pem \ -keyout smtp_cacert.key`...
- What is the risk of appending the Thawte
.pemon the one I generated?
- What functionally is this doing to SSL when I append the Thawte