one ssl cert for multiple virtual server for smtps ?

3 posts / 0 new
Topic locked
Last post
#1 Sun, 08/05/2012 - 20:15
adrianmak

one ssl cert for multiple virtual server for smtps ?

In postfix configuration it likely only accept one cert for a mail server however a actual server may installed multiple virtual server.

How do handle each virtual server smtps ?

Sun, 08/05/2012 - 23:34
andreychek

Howdy,

There isn't a way to handle that, unfortunately... it's only possible to add one SSL cert into Postfix.

Most folks add the SSL cert for the primary domain of the server -- usually the domain in the hostname -- into Postfix.

Apache supports having multiple SSL certificates, but that's not supported on other services.

-Eric

Mon, 08/06/2012 - 02:11
adrianmak

I found that if the FQN of cert created is different from email sending domain, TLS enryption will failed this is a local testing box

Anonymous TLS connection established from unknown[192.168.103.100]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Aug  6 14:58:08 host1 postfix/smtpd[6150]: warning: TLS library problem: 6150:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:s3_pkt.c:1086:SSL alert number 48:
Aug  6 14:58:08 host1 postfix/smtpd[6150]: lost connection after STARTTLS from unknown[192.168.103.100]
Aug  6 14:58:08 host1 postfix/smtpd[6150]: disconnect from unknown[192.168.103.100]

I used host1.example.com to create a cert for postfix Then another virtual server name abc.com, would not able to send in a result of the maillog error message

Topic locked