Mail Client und Zertifikate

  • Ich denke die meisten verwenden als Mailserver-Cert keins von Letsencrypt.
    Für meine Mailserver verwende ich Class2 Zertifikate von StartSSL und habe 2 Jahre Ruhe :-)

    -- formerly known as knut --
    ensim -> confixx -> vhcs -> ispcp -> kloxo -> easyscp -> ispconfig 3 -> i-mscp -> ispconfig 3.1

  • Ok now - only one simple question - am i the ONLY one with this problem here? i cant believe it sorry.

    No, you're not. It's the same problem if you would use windows live mail or Outlook.


    But please follow one of the suggestions to solve your problem.


    Kess also wrote "..and as I can see you still continue to use web4you-gmbh.ch as the CN for your certificate", if this is true and in your postfix conf I can see "myhostname = web4you-gmbh.ch" it can't work with mail.web4you-gmbh.ch or smtp.web4you-gmbh.ch for example. You can't use subdomains if your cert only knows web4you-gmbh.ch.


    Do the following (for testing):


    change your hostname to mail.web4you-gmbh.ch, create a cert for mail.web4you-gmbh.ch and change the hostname in your postfix conf to mail.web4you-gmbh.ch


    All your customers only need mail.web4you-gmbh.ch for "Posteingangsserver" and "Postausgangsserver". This is how it works for me.


    Best regards

  • The problem here is not i-MSCP nor the letsencrypt plugin... all is about configuration and good understanding of ssl... sorry for late answer. I was in Paris for a meet with konzeptplus gmbh and Pydio core team.


    Envoyé de mon SM-A510F en utilisant Tapatalk

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Thanks for all that informations.


    Could it bee possible to copy the Letsencrypt to LeteEncrypt_imap and change all www.<something like www_cname> in all files to <imap_cname> and intall it like the original one? And then the same thing with smtp. ??


    The main problem are my customers. After every change the call me couse this not thrusted cert info.

    I-MSCP 1.5.3 - Debian 9 Stretch

  • @web4you


    I could check your setup through teamviewer tomorrow if you want. It become difficult to follow you here. Some are talking about Start SSL while you use the Let's Encrypt CA... I don't really get the point...

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Do you have european Time?


    Code
    1. nuxwin@dev:~$ LANG=C date
    2. Tue Dec 6 20:24:35 CET 2016
    3. nuxwin@dev:~$ LANG=C date -u
    4. Tue Dec 6 19:24:37 UTC 2016
    5. nuxwin@dev:~$

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206