The diagram below shows the main elements of the Postfix TLS
architecture and their relationships. Colored boxes with numbered
names represent Postfix daemon programs. Other colored boxes
represent storage elements.
-
The
smtpd(8) server implements the SMTP over TLS server
side.
-
The
smtp(8) client implements the SMTP over TLS client
side.
-
The
tlsmgr(8) server maintains the pseudo-random number
generator (PRNG) that seeds the TLS engines in the
smtpd(8) server
and
smtp(8) client processes, and maintains the TLS session key
cache files.
| Network-> |
smtpd(8)
|
<---seed---
<-session-> |
tlsmgr(8)
|
---seed--->
<-session->
|
smtp(8)
| ->Network |
| |
| |
| | | |
| |
smtpd
session
key cache | | PRNG
state
file | | smtp
session
key cache
|
|
