From owner-freebsd-questions@FreeBSD.ORG  Tue May  5 20:53:30 2015
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DA5258BD;
 Tue,  5 May 2015 20:53:29 +0000 (UTC)
Received: from mail-ie0-x22a.google.com (mail-ie0-x22a.google.com
 [IPv6:2607:f8b0:4001:c03::22a])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 9F90A1983;
 Tue,  5 May 2015 20:53:29 +0000 (UTC)
Received: by iecrt8 with SMTP id rt8so155566839iec.0;
 Tue, 05 May 2015 13:53:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:cc:subject
 :references:in-reply-to:content-type;
 bh=BWbIvKBnWAjKx9IRPpy7pv7AVhJ7wBRiOYbmyNsjqnY=;
 b=qxykKYX1koeIkXAcWC0VAFo4rqNHEQRGnGgkDfwWt2KPdGVwYom3RHeVp82X2SBizo
 pbdrZpBYVr0ULz12zZA3gZGTukQ4HXSySAUKxNAv1SmnC22cegll9l9ZmBWh1wzojKVC
 GOyPUuiAdQHSbMuxi9ywSPE2qfnb3CXH+3O4w94+AXLSoH4uX87VgywRXECxnSEn+uOc
 fzPRa9GTSYn1L279GcC0zJzYaLkziAzeN47l8HiLDHZa4vPHRxmSfxvgkAht+ZPCzV7N
 mhQSxAoGxWuIYmSkNzcIa2xe18mxP59Aky5dLO5aIyI7tNihHQ15Pr3tG7AooVsV9EvD
 SsNQ==
X-Received: by 10.42.43.199 with SMTP id y7mr15497611ice.12.1430859208732;
 Tue, 05 May 2015 13:53:28 -0700 (PDT)
Received: from [10.0.10.5] (cpe-76-190-244-6.neo.res.rr.com. [76.190.244.6])
 by mx.google.com with ESMTPSA id 9sm12491258iom.29.2015.05.05.13.53.27
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Tue, 05 May 2015 13:53:28 -0700 (PDT)
Message-ID: <55492DDB.2020501@gmail.com>
Date: Tue, 05 May 2015 16:53:47 -0400
From: Ernie Luzar <luzar722@gmail.com>
User-Agent: Thunderbird 2.0.0.24 (Windows/20100228)
MIME-Version: 1.0
To: Matthew Seaman <matthew@FreeBSD.org>
CC: freebsd-questions@freebsd.org
Subject: Re: postfix with TLS
References: <5546444B.2060002@gmail.com> <55464916.9030305@FreeBSD.org>
 <55464FC2.70709@gmail.com> <55466590.2090607@FreeBSD.org>
In-Reply-To: <55466590.2090607@FreeBSD.org>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.20
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 May 2015 20:53:30 -0000

Matthew Seaman wrote:
> On 03/05/2015 17:41, Ernie Luzar wrote:
>   
>> Is the ability builtin to create SSL keys and certs?
>>     
>
> No.  That's where you'ld use openssl.
>
> 	Mathew
>
>
>   
On my system 10.1 system 'locate openssl'  shows /usr/bin/openssl.
So I take that to mean that 'yes' the ability is builtin to the FreeBSD 
base to
create the SSL keys and certs needed by postfix.

No need to 'pkg install openssl', correct?

Do some TLS parameters have to be added to postfix's main.cf file ?

The openssl comand has to be run to create SSL keys and certs needed by 
postfix for TLS?