RHCE（postfix——邮件加密收发）

一、修改foxmail服务端的服务器配置

1、创建密钥对

[root@haha ~]# cd /etc/postfix/ 
[root@haha postfix]# openssl req -new -x509 -nodes -out smtpd.pem -keyout smtpd.pem -days 3650
Generating a RSA private key
.......................................+++++
..........................................................+++++
writing new private key to 'smtpd.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:86
State or Province Name (full name) []:chongqing
Locality Name (eg, city) [Default City]:chengke
Organization Name (eg, company) [Default Company Ltd]:dashuju
Organizational Unit Name (eg, section) []:rhce
Common Name (eg, your name or your server's hostname) []:mail.text.com
Email Address []:admin@text.com

2、编辑主配置文件

[root@haha postfix]# vim /etc/postfix/main.cf

smtp_use_tls = yes 
smtpd_use_tls = yes 
smtp_tls_note_starttls_offer = yes 
smtpd_tls_key_file = /etc/postfix/smtpd.pem 
smtpd_tls_cert_file = /etc/postfix/smtpd.pem 
smtpd_tls_CAfile = /etc/postfix/smtpd.pem 
smtpd_tls_loglevel = 1 
smtpd_tls_received_header = yes 
smtpd_tls_session_cache_timeout = 3600s 
tls_random_source = dev:/dev/urandom

3、编辑功能配置文件

[root@haha postfix]# vim /etc/postfix/master.cf 

29 smtps inet n - n - - smtpd 
30 # -o syslog_name=postfix/smtps 
31 -o smtpd_tls_wrappermode=yes 
32 -o smtpd_sasl_auth_enable=yes 

4、重启服务

[root@haha postfix]# systemctl restart postfix 
[root@haha postfix]# systemctl restart saslauthd 
[root@haha postfix]# systemctl restart dovecot

2、修改foxmail客户端的服务器配置

查看服务器日志：

# 查看日志 
Oct 25 20:02:27 kittod dovecot[9122]: pop3-login: Login: user=<xixi>, 
method=PLAIN, rip=192.168.226.1, lip=192.168.226.130, mpid=9151, TLS, session= <2UtzIizP89HAqOIB>