#1  
Old 15th October 2011, 17:57
bswinnerton bswinnerton is offline
Senior Member
 
Join Date: Jul 2007
Location: Connecticut, US
Posts: 502
Thanks: 51
Thanked 17 Times in 14 Posts
Default Multiple IMAP-SSL certificates?

Is it possible to have multiple IMAP-SSL certificates on one ISPConfig server? I have two ip addresses linked to it, and the SSL works great as far as a browser is concerned, but when I try connecting with a mail client, it thinks that it's the first IMAP-SSL instead of the newly created one with the second ip address.

Much thanks
Reply With Quote
Sponsored Links
  #2  
Old 16th October 2011, 19:42
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,388
Thanks: 833
Thanked 5,485 Times in 4,317 Posts
Default

As far as i know, neither courier nor dovecot support the configuration on multiple ssl certs per server.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 16th October 2011, 20:34
The Other Air Force The Other Air Force is offline
Junior Member
 
Join Date: Sep 2011
Location: Canada
Posts: 18
Thanks: 5
Thanked 4 Times in 3 Posts
Default

Hi,
In the master.cf file I have Postfix setup as follows:

<IP Address 1>:smtps inet n - - - - smtpd
-o myhostname=<hostname>
-o smtp_tls_security_level=may
-o smtpd_tls_cert_file=<certificate filename>
-o smtpd_tls_key_file=<key filename>
-o smtpd_tls_CAfile=<bundle filename>
-o smtp_bind_address=<IP Address 1>
-o myorigin=<hostname>


<IP Address 2>:smtps inet n - - - - smtpd
-o myhostname=<hostname>
-o smtp_tls_security_level=may
-o smtpd_tls_cert_file=<certificate filename>
-o smtpd_tls_key_file=<key filename>
-o smtpd_tls_CAfile=<bundle filename>
-o smtp_bind_address=<IP Address 2>
-o myorigin=<hostname>

I have Courier setup basically what you do is set the following directives. In imapd-ssl and pop3d-ssl I have the following set:

TLS_CERTFILE=<path to CERT FILE>
TLS_TRUSTCERTS=<path to bundle file>

Then in the directory where these files located I have files that end in the IP address of host. If my filenames above are /etc/courier/darwin then I would have darwin.<ip address 1> and darwin.<ip address 2>

More information about the formats of the files can be found in the configuration file.

Hope this helps. The only issue that I have with postfix is that outbound mail always appears to come from one of the hostnames. I haven't figured out how to get it to appear from the hostname it was sent from. It hasn't been an issue for me so I haven't dug into it. (Any hints from anyone?).
Reply With Quote
The Following 2 Users Say Thank You to The Other Air Force For This Useful Post:
falko (17th October 2011), till (16th October 2011)
  #4  
Old 3rd November 2011, 22:47
The Other Air Force The Other Air Force is offline
Junior Member
 
Join Date: Sep 2011
Location: Canada
Posts: 18
Thanks: 5
Thanked 4 Times in 3 Posts
 
Default

Just an update.

After updating my DNS to include AAAA I couldn't get any IPv6 clients to connect to Courier with SSL. I had to make a link to the certificate files with the IPv6 addresses at the end, courier couldn't find the files for the IPv6 addresses. So now I have this:

TLS_CERTFILE=/etc/courier/darwin

with these files in the /etc/courier directory
darwin.<IPv4 address 1> and darwin.<IPv4 address 2>
darwin.<IPv6 address 1> and darwin.<IPv6 address 2>
Reply With Quote
The Following User Says Thank You to The Other Air Force For This Useful Post:
falko (4th November 2011)
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Not working emails (DNS and postfix problem?) shekiman Installation/Configuration 9 1st March 2011 16:25
Apache2 and multiple SSL configs and name based virtual hosting Creator1326 Server Operation 11 5th October 2010 19:28
ISPConfig and SSL Certificates phamels Installation/Configuration 48 2nd April 2009 18:33
Re-generating SSL certificates for ISPConfig Norman General 6 13th May 2008 19:27
Upgrade from 2.2.0 to 2.2.1 successful but SSL and IMAP stopped working teleriddler Installation/Configuration 8 29th April 2006 14:25


All times are GMT +2. The time now is 12:31.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.