If got this error when sending email to GMail/Yahoo!/etc via secure channel:
Untrusted TLS connection established to gmail-smtp-in.l.google.com[74.125.24.26]:25: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Add this line to /etc/postfix/main.cf
smtp_tls_CApath = /etc/ssl/certs
smtpd_tls_CApath = /etc/ssl/certs
and restart Postfix.