X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=debian%2Fpostinst;h=c294a006d9a5ef6c2c07cf5cb85f27ff7a0aa3c0;hb=dff0b6a4d1526203b220380ba39a1b59b61cc4f2;hp=2dad0b15a22720f55dd7028cfccc0b77df27b36e;hpb=32265852e252dbcd0b7f320d5d7344822683664d;p=postfix-cn.git

diff --git a/debian/postinst b/debian/postinst
index 2dad0b1..c294a00 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -248,17 +248,17 @@ if [ "$restart_saslauthd" = "yes" ]; then
 fi
 
 # TLS stuff
-postconf -e smtp_use_tls="yes"
+postconf -e smtp_tls_security_level="may"
 postconf -e smtp_tls_session_cache_database="sdbm:/var/lib/postfix/smtp_scache"
 postconf -e smtp_tls_session_cache_timeout="3600s"
-postconf -e smtpd_use_tls="yes"
+postconf -e smtpd_tls_security_level="may"
 postconf -e smtpd_tls_session_cache_database="sdbm:/var/lib/postfix/smtpd_scache"
 postconf -e smtpd_tls_session_cache_timeout="3600s"
 postconf -e tls_random_source="dev:/dev/urandom"
 postconf -e smtpd_tls_exclude_ciphers="aNULL"
 postconf -e smtpd_tls_mandatory_exclude_ciphers="aNULL"
 
-# nije potrebno generiranje certifikata jer postfix koristi ssl-cert
+# nije potrebno generiranje certifikata jer postfix koristi paket ssl-cert
 # ako je postavljen snakeoil certifikat za smtpd_tls_* postavi isti za smtp_tls_*
 smtpd_tls_cert_file="`postconf -h smtpd_tls_cert_file`"
 if [ "$smtpd_tls_cert_file" = "/etc/ssl/certs/ssl-cert-snakeoil.pem" ]; then
@@ -266,21 +266,15 @@ if [ "$smtpd_tls_cert_file" = "/etc/ssl/certs/ssl-cert-snakeoil.pem" ]; then
   postconf -e smtp_tls_key_file="/etc/ssl/private/ssl-cert-snakeoil.key"
 fi
 
-# ako je prazan, postavi na defaultni iz ssl-cert
+# ako je prazan, postavi na defaultni iz paketa ssl-cert
 smtpd_tls_cert_file="`postconf -h smtpd_tls_cert_file`"
 if [ -z "$smtpd_tls_cert_file" ]; then
   postconf -e smtpd_tls_cert_file="/etc/ssl/certs/ssl-cert-snakeoil.pem"
-fi
-smtpd_tls_key_file="`postconf -h smtpd_tls_key_file`"
-if [ -z "$smtpd_tls_key_file" ]; then
   postconf -e smtpd_tls_key_file="/etc/ssl/private/ssl-cert-snakeoil.key"
 fi
 smtp_tls_cert_file="`postconf -h smtp_tls_cert_file`"
 if [ -z "$smtp_tls_cert_file" ]; then
   postconf -e smtp_tls_cert_file="/etc/ssl/certs/ssl-cert-snakeoil.pem"
-fi
-smtp_tls_key_file="`postconf -h smtp_tls_key_file`"
-if [ -z "$smtp_tls_key_file" ]; then
   postconf -e smtp_tls_key_file="/etc/ssl/private/ssl-cert-snakeoil.key"
 fi
 
@@ -365,3 +359,5 @@ if [ "$restart_postfix" = "yes" ]; then
   fi
 fi
 cp_mail postfix-cn
+
+#DEBHELPER#