the postfix configuration file is located in /etc/postfix/main.cf. the lines within this file which deal with tls are:
smtpd_tls_CAfile = /etc/ssl/mydomain.com.root.ca.pem smtpd_tls_cert_file = /etc/ssl/certs/mydomain.com.crt smtpd_tls_key_file = /etc/ssl/private/mydomain.com.key.unencrypted none of these files require a password. note that the unencrypted key file may be generated from an encrypted key file (ie a key file that does have a password) using the command:
openssl rsa -in /etc/ssl/mydomain.com.key.encrypted -out /etc/ssl/mydomain.com.key.unencrypted from everything i have read, i don't think it is possible to pass the encrypted key file straight to postfix - i think it has to be an unencrypted key file that is passed in.