Hello,

using letsencrypt ssl certs with san works perfectly with 2.2.34, but
after uprading to 2.3.4.1 it couldn't verified (also tried v2.3.7.1).

i connect to imap.myserver.lan

the cn of the cert is myserver.lan and has the san imap.myserver.lan

openssl s_client -connect imap.myserver.lan:993
CONNECTED(00000005)
depth=0 CN = imap.myserver.lan
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = imap.myserver.lan
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:CN = imap.myserver.lan
i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

 

if i cat ssl_ca and ssl_cert into one file and only use ssl_cert it's working with 2.3.X

ssl_ca = </etc/ssl/ca-bundle.pem
ssl_cert = </etc/ssl-imap.pem