1 Topic by saquib.akhtar

  • saquib.akhtar
  • saquib.akhtar
  • Member
  • Offline
  • From: INDIA
  • Registered: 2018-02-20
  • Posts: 110

Topic: SSL certificate generation

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Cent OS 7.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? yes
====

How can I generate certificate using cert-bot utility of let's encrypt as it is giving me error:

Failed authorization procedure. mailserver.medhaj.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://mailserver.medhaj.com/.well-know … yYWk8x2AI: "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html "

IMPORTANT NOTES:
- The following errors were reported by the server:

   Domain: mailserver.medhaj.com
   Type:   unauthorized
   Detail: Invalid response from
   http://mailserver.medhaj.com/.well-know … yYWk8x2AI:
   "<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
   <html "

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Jochie

  • Jochie
  • Jochie
  • Member
  • Offline
  • Registered: 2010-09-23
  • Posts: 100

Re: SSL certificate generation

you could use let'sencrypt for generating certificates for your domain(s).
next step would be to assign them, in your webserver, and your mailserver and any other service which uses ssl connections.

Nginx example:     http://bfy.tw/JXjM
Postfix example:   http://bfy.tw/JXjQ
Dovecot example: http://bfy.tw/JXjV

Good luck.

3 Reply by saquib.akhtar

  • saquib.akhtar
  • saquib.akhtar
  • Member
  • Offline
  • From: INDIA
  • Registered: 2018-02-20
  • Posts: 110

Re: SSL certificate generation

Jochie wrote:

you could use let'sencrypt for generating certificates for your domain(s).
next step would be to assign them, in your webserver, and your mailserver and any other service which uses ssl connections.

Nginx example:     http://bfy.tw/JXjM
Postfix example:   http://bfy.tw/JXjQ
Dovecot example: http://bfy.tw/JXjV

Good luck.


Already done, thanks.. !!