Replication with SSL
deZillium
dezillium at dezillium.com
Wed Oct 26 10:56:36 UTC 2016
Hello,
- Set up a pair of servers according to http://wiki2.dovecot.org/Replication
-Enabled SSL for both servers
- Dovecot version: 2.2.13 (Debian 8.6)
I couldn't find an option to specify the certificate that doveadm should
use when connecting to the other server. Both servers have hostnames
that are different, as verified by dovecot --hostdomain(as per the
instructions) but use a common certificate when emailclients connect to
them (high availability setup). Yes, single server login works as
expected, been working for the past few years :-).
Setting up a custom ssl_client_ca_file doesn't work, since doveadm
doesn't know which certificate it should send when connecting to the
other doveadm. Setting the ssl_client_ca_dir tothe directory with the
global CAsdoesn't work either, since doveadm doesn't use the hostname
that dovecot actually uses.
The custom self-signed CA works when used outside dovecot(mysql for
example).
Is there any configuration thatneeds to be changed in order for doveadm
to use a custom self signed certificate?
Thank you
More information about the dovecot
mailing list