[BlueOnyx:25138] Re: Quickfix for BO servers with certificates that are old or doesn't work anymore!!!

Maurice de Laat mdlaat at muisnetwerken.nl
Thu Sep 30 13:55:05 -05 2021


Hi Michael,

On 30-09-2021 19:35, Michael Stauber wrote:
>
> No, I'm actually scratching my head why someone would do that. Instead
> just request a new LE cert for the GUI via the GUI. That's then used for
> AdmServ, Dovecot and Sendmail/Postfix.
>
>
Before this fix, the certificate chain of the GUI was perfectly valid. 
Dovecot presented the same certificate for the servername as the GUI 
did, which was valid. However dovecot (and dovecot only) presented an 
intermediate certificate that was expired. Not all imaps-clients 
complained about that, Apple's ios p.e. did. My own thunderbird didn't.

Kind regards

Maurice




More information about the Blueonyx mailing list