Replication with SSL

deZillium dezillium at dezillium.com
Wed Oct 26 10:56:36 UTC 2016


Hello,

- Set up a pair of servers according to http://wiki2.dovecot.org/Replication
-Enabled SSL for both servers
- Dovecot version: 2.2.13 (Debian 8.6)

I couldn't find an option to specify the certificate that doveadm should 
use when connecting to the other server. Both servers have hostnames 
that are different, as verified by dovecot --hostdomain(as per the 
instructions) but use a common certificate when emailclients connect to 
them (high availability setup). Yes, single server login works as 
expected, been working for the past few years :-).

Setting up a custom ssl_client_ca_file doesn't work, since doveadm 
doesn't know which certificate it should send when connecting to the 
other doveadm. Setting the ssl_client_ca_dir tothe directory with the 
global CAsdoesn't work either, since doveadm doesn't use the hostname 
that dovecot actually uses.

The custom self-signed CA works when used outside dovecot(mysql for 
example).

Is there any configuration thatneeds to be changed in order for doveadm 
to use a custom self signed certificate?

Thank you


More information about the dovecot mailing list