1

Topic: Changing letsencrypt with a bought cert.

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): iRedAdmin    1.3 (PostgreSQL)
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: 5.4.0-190-generic #210-Ubuntu SMP Fri Jul 5 17:03:38 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PostgreSQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,
The lestsencrypt cert has expired and decided to buy a cert.
Copied crt, privekey, and the bundle files to /etc/ssl/certs and /etc/ssl/private.

>Configured the NGINX ssl.tmpl file to use the new cert and bundle file, and private key
>NGINX -t was sucessful
>Configured postfx main.cf file with SSL as above
>Configured dovecot.conf to use ssl per above

issues:
1. SSL cert is graded "B" and broken chain - bundle file
2. When logging in to Roundcube, error can't connect to storage

To resolve #2, reverted back to old config

The server works fine sending/receiving emails.

How do I fix #1 #2?

Best/ Yigal

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.