diff --git a/mail/postfix/Makefile b/mail/postfix/Makefile
index 659bcd8c1..f0c2159c3 100644
--- a/mail/postfix/Makefile
+++ b/mail/postfix/Makefile
@@ -1,6 +1,6 @@
 PLUGIN_NAME=		postfix
 PLUGIN_VERSION=		1.23
-PLUGIN_REVISION=	3
+PLUGIN_REVISION=	4
 PLUGIN_COMMENT=		SMTP mail relay
 PLUGIN_DEPENDS=		postfix
 PLUGIN_MAINTAINER=	m.muenz@gmail.com
diff --git a/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf b/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
index 5ce384efa..2d462bb42 100644
--- a/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
+++ b/mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
@@ -37,7 +37,7 @@ recipient_bcc_maps = hash:/usr/local/etc/postfix/recipientbcc
 sender_canonical_maps = regexp:/usr/local/etc/postfix/sendercanonical
 header_checks = pcre:/usr/local/etc/postfix/header_checks_receiving
 smtp_header_checks = pcre:/usr/local/etc/postfix/header_checks_delivering
-smtp_tls_CAfile = /etc/ssl/cert.pem
+smtp_tls_CAfile = /usr/local/etc/ssl/cert.pem
 ##########################
 # END SYSTEM DEFAULTS
 ##########################
@@ -120,7 +120,7 @@ smtpd_tls_cert_file = /usr/local/etc/postfix/cert_opn.pem
 {% if helpers.exists('OPNsense.postfix.general.ca') and OPNsense.postfix.general.ca != '' %}
 smtpd_tls_CAfile = /usr/local/etc/postfix/ca_opn.pem
 {% else %}
-smtpd_tls_CAfile = /etc/ssl/cert.pem
+smtpd_tls_CAfile = /usr/local/etc/ssl/cert.pem
 {% endif %}
 {% if helpers.exists('OPNsense.postfix.general.tls_server_compatibility') %}
 {% if OPNsense.postfix.general.tls_server_compatibility == 'modern' %}