ISPsystem.com Forums

ISPsystem.com Forums (http://forum.ispsystem.com//index.php)
-   Troubleshooting (http://forum.ispsystem.com//forumdisplay.php?f=11)
-   -   problems with SSL certs for email domains (http://forum.ispsystem.com//showthread.php?t=3082)

dragon 12-31-2017 01:16 PM

problems with SSL certs for email domains
 
I've installed fresh ispmanager lite on debian 9
Have same problem as on earlier OS.
Dovecot and exim uses only main ssl certificate

-r--r--r-- 1 Debian-exim Debian-exim 4558 gru 31 11:24 /etc/exim4/ssl/exim.crt
-r-------- 1 Debian-exim Debian-exim 1702 gru 31 11:24 /etc/exim4/ssl/exim.key

Certificates for email domains exists but exim and dovecot ignores them, and uses only global cert.

I've also error in log

dovecot: config: Warning: /etc/dovecot/conf.d/10-ssl.conf line 65: Global setting ssl_key won't change the setting inside an earlier filter at /etc/dovecot/certs/xxx.conf line 3 (if this is intentional, avoid this warning by moving the global setting before /etc/dovecot/certs/xxx.conf line 3)

changing order doesn't change anything.

Can You provide proper instruction for using clients LE generated certificates, instead of global cert?

ksenya 01-11-2018 07:46 AM

Hello

This issue was resolved in 5.130. The mail server should use the right certificates when connecting to mail.domain.com

However, it was not tested on Debian 9. You can send us a ticket and grant access to your server. Our QA department will check.


All times are GMT +2. The time now is 04:54 PM.

Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2021, vBulletin Solutions, Inc.