Differences

This shows you the differences between two versions of the page.

--- linux:emailserver:courier [2018/01/30 19:11]
tkilla
+++ linux:emailserver:courier [2018/02/01 02:09]
tkilla
@@ Line 46: / Line 46: @@
 ===== config tricks =====
+===== SSL Certificates =====
+...tricky!
+All config files use these two variables, so I set them to the same cert files in all configs:
+Private Key and Cert and intermediate-cert and root-cert(s) combined in one file. The order is unclear. I had the private key first for many years, but documentations speak about putting the cert first:
+  cat myserver.example.com.key myserver.example.com.crt [intermediate.crt] > myserver.example.com.pem
+  TLS_CERTFILE=/etc/courier/cert.pem
+This contains the intermidiate-certs - i use the ca-bundle provided by the vert dealer
+This seems to be only used by eSMTP - IMAP and POP works without it
+  TLS_TRUSTCERTS=/etc/courier/inter.crt
+Checks:
+  openssl s_client -starttls imap -connect myserver.example.com:143
+https://www.sslchecker.com/sslchecker
+SMTP-Error after cert install: "no cipher suites found": ~might~ have been a problem with gnutls, which was fixed by updating (2018.01). he cert order is irrelavant and an old TLS_TRUSTCERTS works, too.

fr33.info