Description

We no longer support this method with setup.sh from v10 onwards (previously deprecated), SSL_TYPE=self-signed remains supported however.

Advice has been revised for users to provide their own self-signed cert or use an external tool with an example provided.

Direct preview link.

Type of change

Complimentary documentation update for the v10 deprecation of the shell script tool.

• Improvement (non-breaking change that does improve existing functionality)
• This change requires a documentation update

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have made corresponding changes to the documentation (README.md or the documentation under docs/)
• If necessary I have added tests that prove my fix is effective or that my feature works

I have followed the new advice on a minimal setup, and a simple test on verification working with (run within the same container):

openssl s_client -CAfile /etc/postfix/ssl/cacert.pem -connect mail.example.test:587 -starttls smtp | grep 'Verification'

# Successful
Verification: OK

# Failure (not providing valid `-CAfile`)
Verification error: self signed certificate in certificate chain

A future release will deprecate SSL_TYPE of self-signed, when manual and custom (undocumented) are unified to support all three types as one.