\u041a\u0430\u043a-\u0442\u043e \u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u043e\u0442\u0432\u0430\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b starttls \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Postfix. \u0412\u0441\u0451 \u043d\u0435 \u0434\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0440\u0443\u043a\u0438, \u0434\u0430 \u0438 \u043d\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u043e\u0441\u043e\u0431\u043e, \u043f\u043e\u0447\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u043e \u0431\u0435\u0437\u043e\u0431\u0440\u0430\u0437\u0438\u0435… \u0410 \u0432\u043e\u0442 \u043d\u0430\u0437\u0440\u0435\u043b\u043e, \u043f\u043e\u0440\u044b\u043b\u0441\u044f \u0438 \u043d\u0430\u0448\u0451\u043b \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u0435\u0439\u0448\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443:<\/p>\n
openssl req -new -x509 -days 7300 -nodes -out \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem -keyout \/etc\/ssl\/private\/ssl-cert-snakeoil.key<\/p>\n
\u0412 \u043c\u043e\u0435\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 postfix \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u043f\u0443\u0442\u0438 \u0438 \u0444\u0430\u0439\u043b\u044b, \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u044d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432 \/etc\/postfix\/main.cf:<\/p>\n
# TLS parameters
\nsmtpd_tls_cert_file=\/etc\/ssl\/certs\/ssl-cert-snakeoil.pem\/etc\/ssl\/certs\/ssl-cert-snakeoil.pem
\nsmtpd_tls_key_file=\/etc\/ssl\/private\/ssl-cert-snakeoil.key<\/p>\n
\u0420\u0430\u0437\u0443\u043c\u0435\u0435\u0442\u0441\u044f, \u043f\u0440\u0435\u0436\u0434\u0435 \u044f \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043b \u0441\u0442\u0430\u0440\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 (\u043d\u0430\u0432\u0435\u0440\u043d\u043e, \u043d\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e, \u043e\u043d\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434) \u0438 \u043f\u043e\u0441\u043b\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043f\u043e\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 600:<\/p>\n
chmod 600 \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem \/etc\/ssl\/private\/ssl-cert-snakeoil.key<\/p>\n
\u0438 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u043d\u0430 700:<\/p>\n
chmod 700 \/etc\/ssl\/certs \/etc\/ssl\/private<\/p>\n
\u0430 \u0442\u0430\u043a \u0436\u0435 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430:<\/p>\n
chown -R root:root \/etc\/ssl<\/p>\n
\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u043c\u043e\u0436\u043d\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 postfix check, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 postfix reload<\/p>\n","protected":false},"excerpt":{"rendered":"
\u041a\u0430\u043a-\u0442\u043e \u0434\u0430\u0432\u043d\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u043e\u0442\u0432\u0430\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b starttls \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Postfix. \u0412\u0441\u0451 \u043d\u0435 \u0434\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0440\u0443\u043a\u0438, \u0434\u0430 \u0438 \u043d\u0435 \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u043e\u0441\u043e\u0431\u043e, \u043f\u043e\u0447\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u043e \u0431\u0435\u0437\u043e\u0431\u0440\u0430\u0437\u0438\u0435… \u0410 \u0432\u043e\u0442 \u043d\u0430\u0437\u0440\u0435\u043b\u043e, \u043f\u043e\u0440\u044b\u043b\u0441\u044f \u0438 \u043d\u0430\u0448\u0451\u043b \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u0435\u0439\u0448\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443:<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[61,467],"tags":[1785,282,675,1786,1784,850,1782,1783,1781,1787,1779,1780],"class_list":["post-1464","post","type-post","status-publish","format-standard","hentry","category-internet","category-mail-internet","tag-certs","tag-chmod","tag-chown","tag-main-cf","tag-openssl","tag-postfix","tag-postfix-check","tag-postfix-reload","tag-ssl","tag-ssl-cert-snakeoil","tag-starttls","tag-tls"],"_links":{"self":[{"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/posts\/1464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1464"}],"version-history":[{"count":1,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/posts\/1464\/revisions"}],"predecessor-version":[{"id":1465,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=\/wp\/v2\/posts\/1464\/revisions\/1465"}],"wp:attachment":[{"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sashakrasnoyarsk.ru\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}