diff --git a/public/fs/etc/postfix/main.cf.in b/public/fs/etc/postfix/main.cf.in
index 5d6d80f..12ddbf2 100644
--- a/public/fs/etc/postfix/main.cf.in
+++ b/public/fs/etc/postfix/main.cf.in
@@ -37,6 +37,7 @@ internal_mail_filter_classes    = bounce
 
 # tls ...
 tls_random_source               = dev:/dev/urandom
+tls_append_default_CA           = no
 
 smtp_tls_loglevel               = 3
 smtp_tls_security_level         = encrypt
@@ -55,8 +56,8 @@ smtpd_use_tls                   = yes
 smtpd_tls_auth_only             = yes
 smtpd_tls_received_header       = yes
 
-smtpd_tls_CApath                = /etc/ssl/certs
-smtpd_tls_CAfile                = /srv/webroot/@smtphost@/ssl/cert.pem
+smtpd_tls_CApath                = /etc/easy-rsa/pki
+smtpd_tls_CAfile                = /etc/easy-rsa/pki/ca.crt
 
 meta_directory                  = /usr/lib/postfix
 setgid_group                    = maildrop