1 (edited by alekperov11 2021-12-20 02:10:06)

Topic: SSL Certificate

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hi!
I have installed an IredMail on FreeBSD 13.
Everything is working, but...

My Posfix main.cf
smtpd_tls_key_file = /etc/ssl/private/iRedMail.key
smtpd_tls_cert_file = /etc/ssl/certs/iRedMail.crt
smtpd_tls_CAfile = /etc/ssl/cert.pem
smtpd_tls_CApath = /etc/ssl/certs

iRedMail.key and iRedMail.crt have a soft link to /usr/local/etc/letsencrypt/live/my.domain.com/privkey.pem and fullchain.pem files accordingly.

smtpd_tls_CAfile = /etc/ssl/cert.pem have a soft link to /usr/local/share/certs/ca-root-nss.crt.

Should I change the soft link on this file to the Letsencrypt certificate file? If so, which certificate file of letsencrypt?

Files in /usr/local/etc/letsencrypt/live/my.domain.com/
README          cert.pem        chain.pem       fullchain.pem   privkey.pem

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by Cthulhu 2021-12-20 05:34:53)

Re: SSL Certificate

since you use the fullchain as certfile, you don't needt he CAfile at all, you can outcomment this, or you use the chain file belonging to the domain cert, which is optional (chain.pem in your case)

3

Re: SSL Certificate

Ok. Thank you