Sep 14, 2018

PowerMTA Outbound Client Certificate

Most of outbound connections do not require a local certificate, Security sensitive remote mail server requires PowerMTA to use a given certificate for encrypting the channel between the two servers. 

Outbound secure connections can be set up in PowerMTA with a setup similar to the following:

    smtp-client-certificate /path/to/certificate-provided-by remote-server.pem password
    use-starttls yes
    require-starttls yes
Any messages sent to will sent over an encrypted channel using the certificate /path/to/certificate-provided-by remote-server.pem. 

If the encryption fails, the messages will not be sent.