US: 1-941-4621-069
  
Cyprus: 3-572-2052-781

Go Back   ISPsystem.com Forums > ISPmanager > Troubleshooting


Reply
 
Thread Tools
Old 12-31-2017, 01:16 PM   #1
Member
 
Join Date: Jan 2013
Posts: 38
dragon is on a distinguished road
Default problems with SSL certs for email domains

I've installed fresh ispmanager lite on debian 9
Have same problem as on earlier OS.
Dovecot and exim uses only main ssl certificate

-r--r--r-- 1 Debian-exim Debian-exim 4558 gru 31 11:24 /etc/exim4/ssl/exim.crt
-r-------- 1 Debian-exim Debian-exim 1702 gru 31 11:24 /etc/exim4/ssl/exim.key

Certificates for email domains exists but exim and dovecot ignores them, and uses only global cert.

I've also error in log

dovecot: config: Warning: /etc/dovecot/conf.d/10-ssl.conf line 65: Global setting ssl_key won't change the setting inside an earlier filter at /etc/dovecot/certs/xxx.conf line 3 (if this is intentional, avoid this warning by moving the global setting before /etc/dovecot/certs/xxx.conf line 3)

changing order doesn't change anything.

Can You provide proper instruction for using clients LE generated certificates, instead of global cert?
dragon is offline   Reply With Quote
Old 01-11-2018, 07:46 AM   #2
ISPsystem team
 
Join Date: Jul 2014
Posts: 443
ksenya is on a distinguished road
Default

Hello

This issue was resolved in 5.130. The mail server should use the right certificates when connecting to mail.domain.com

However, it was not tested on Debian 9. You can send us a ticket and grant access to your server. Our QA department will check.
ksenya is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 09:10 AM.