1

Topic: Invalid certificat for mail server

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version: 1.4.0 MARIADB edition.
- Deployed with: Downloadable installer.
- Linux/BSD distribution: Ubuntu 20.04.1 LTS (GNU/Linux 5.4.0-47-generic x86_64)
- Store mail accounts in which backend: MARIADB.
- Web server: Nginx
- Do not manage mail accounts with iRedAdmin-Pro
====

Hi, today, K-9 Mail showed me an error that the certificat is invalid. Thunderbird is not able to download new emails, though it didnt show me an error yet. The certificat works for the webserver and when I log in via the web interface, it shows me a new email the clients weren't able to show me.

I followed this blog post to get an error message, I am pasting it below. I hope someone can help me.

CONNECTED(00000003)
140492141061440:error:1408F10B:SSL routines:ssl3_get_record:wrong version number                                         :../ssl/record/ssl3_record.c:331:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 309 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Invalid certificat for mail server

there is a wrong softlink to the certificate, you need the fullchain cert, then restart postfix and everything should work again.

you use the self signed, or one by letsencrypt?

3

Re: Invalid certificat for mail server

I use one by letsencrypt.

It is weird though that the link would be broken, since it worked fine since I set the server up and broke just sometime yesterday.

4 (edited by poolitzer 2021-11-06 19:05:54)

Re: Invalid certificat for mail server

I restarted dovecot

service dovecot restart

, this solved the problem