# Configure TLS.
tls_random_source=dev:/dev/urandom

# Settings that control how email is received when using TLS.
smtpd_tls_cert_file=/etc/pki/tls/certs/ssl-cert-mail.crt
smtpd_tls_key_file=/etc/pki/tls/private/ssl-cert-mail.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls=yes
smtpd_tls_security_level=may
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_eecdh_grade = strong

# Settings that control how email is sent when using TLS.
smtp_tls_cert_file=/etc/pki/tls/certs/ssl-cert-mail.crt
smtp_tls_key_file=/etc/pki/tls/private/ssl-cert-mail.key
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_use_tls=yes

# Settings that control authentication.
smtpd_sasl_type=dovecot
smtpd_sasl_path=private/auth
smtpd_sasl_security_options=noanonymous