Need to add ssl CA to dovecot conf for gmail to work

Hey guys, stumbled across this and wanted to share... less a bug than a (new) requirement from gmail...

We have some customers that use gmail to pop their email from our servers to their gmail account. For this to work gmail has to see the full ssl chain or they will not connect and throw very generic errors. I fixed this by adding /dovecot.ca.pem to my dovecot ssl config and the "ssl_ca" line below /etc/dovecot/dovecot.conf- rebooted and gmail now connects w/out issue!

local_name my.mailserver.com {
ssl_cert = </home/my.mailserver.com/ssl.cert
ssl_key = </home/my.mailserver.com/ssl.key
ssl_ca = </home/my.mailserver.com/ssl.ca
}
Status: 
Active

Comments

Virtualmin should actually set this already, but due to a bug in the current release it doesn't happen. However, this will be fixed in the next version.