I’m running into a similar issue. I’ve always used aliases on my email system to make it easier to change out the backend. i.e. mailserver.domain.com is the MX and primary address, but I give users: imap.domain.com and smtp.domain.com . Those two addresses point to mailserver.domain.com so everyone…

[image] Ted: they aren’t being associated with mail Correct, it is just a certificate for a domain that can be resolved correctly and do these do not point to mail.domain.com but to the FQDN provided. I do not hope the final asnwer is “this is not a task for NS8 but for a firewall”. @davidep …

[image] Ted: However, on NS8, I am now getting certificate errors, because I can’t find anyway to add the aliases (imap and smtp) to the mailserver certificate. I’ve added them as additional TLS certificates, but that doesn’t seem to help. The certificate obtained by Traefik and passed to Mai…

Thanks, @davidep Not the answer I was hoping for, but I appreciate the clarity.

[image] davidep: uploading a certificate with the alternative names This is so counterintuitive don’t you think?

According to Traefik docs it seems possible to obtain a certificate with alternative host names: Traefik Let's Encrypt Documentation - Traefik If somebody want to play with it, load a custom .yml file of Traefik configuration under the configs/ directory, e.g. runagent -m traefik1 cd configs vi my…

[image] davidep: Traefik Not that I am the one to have the knowledge, but does this address the root question? Traefik Routers Documentation - Traefik In Traefik Proxy, a router is in charge of connecting incoming requests to the Services that can handle them. Read the technical…

Hi @davidep It’s easy to find the certificate-mail.domain.com.yml. Per the docs, I believe the correct syntax would be this: http: routers: certificate-mail.domain.com: entrypoints: https service: ping@internal rule: Host(`mail.domain.com`) && Path(`/cd98a9c8-24c2-441b-a6d5…

[image] Ted: “refresh” traefik? same meaning as restart? If so, I think it could be similarly as Steph showed us . runagent -m traefik1 systemctl restart --user traefik.service

[image] dnutan: I think it could be similarly as Steph showed us Excellent! Yes. That restarted Traefik. Sadly, my config file does not appear to have worked.

[image] Ted: Excellent! Yes. That restarted Traefik. Sadly, my config file does not appear to have worked. Try with curl -v https://imap.domain.com/cd98a9c8-24c2-441b-a6d5-159afe0b1822

NethServer Community

TLS certificate error with mail host aliases

Support

ns8

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled