[Dovecot] Certificate Server name!
I previously posted this message and made a type mistake. I wrote "imap.tib.com instead it should red "imap.example.com". I have corrected the message and am reposting it. SORRY.
Setup of Dovecot went smoothly.
Now when I try to retrieve mail from the server, I get the following message:
Security Error: Domain name mismatch
You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.example.com".....
How to fix this message?
Thanks in advance.
Kirt
Hi Kirt,
Right in that case, the installation of Dovecot has somewhere created a certificate with "imap.example.com" as the common name (CN.)
I'm afraid I cannot help further as I don't use SSL in Dovecot, however what I'll say is lookup how to create a certificate in OpenSSL. Perhaps someone else can advise how to create and configure a certificate to use with Dovecot.
Andy
kbajwa wrote:
I previously posted this message and made a type mistake. I wrote "imap.tib.com instead it should red "imap.example.com". I have corrected the message and am reposting it. SORRY.
Setup of Dovecot went smoothly.
Now when I try to retrieve mail from the server, I get the following message:
Security Error: Domain name mismatch
You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.example.com".....
How to fix this message?
Thanks in advance.
Kirt
Hello All:
I may have found the answer. However, the credit goes to everyone who responded. Here is what I have discovered:
"etc/pki/dovecot/dovecot-openSSL.conf"
has the information regarding creating a certificate used by Dovecot. This file may be updated to correct this problem. I am going to look into it.
Thanks all.
Kirt
-----Original Message----- From: Andy Shellam [mailto:andy.shellam-lists@mailnetwork.co.uk] Sent: Sunday, July 06, 2008 3:02 PM To: kbajwa@tibonline.net Cc: 'Dovecot Mailing List' Subject: Re: [Dovecot] Certificate Server name!
Hi Kirt,
Right in that case, the installation of Dovecot has somewhere created a certificate with "imap.example.com" as the common name (CN.)
I'm afraid I cannot help further as I don't use SSL in Dovecot, however what I'll say is lookup how to create a certificate in OpenSSL. Perhaps someone else can advise how to create and configure a certificate to use with Dovecot.
Andy
I previously posted this message and made a type mistake. I wrote "imap.tib.com instead it should red "imap.example.com". I have corrected
kbajwa wrote: the
message and am reposting it. SORRY.
Setup of Dovecot went smoothly.
Now when I try to retrieve mail from the server, I get the following message:
Security Error: Domain name mismatch
You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.example.com".....
How to fix this message?
Thanks in advance.
Kirt
kbajwa, 06.07.2008 (d.m.y):
Setup of Dovecot went smoothly.
Now when I try to retrieve mail from the server, I get the following message:
Security Error: Domain name mismatch
You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.example.com".....
How to fix this message?
Re-create your SSL certificate and key and take care that the COmmon Name (CN) is set to your hostname ("mail.tib.com").
Gruss/Regards, Christian Schmidt
-- Accent on helpful side of your nature. Drain the moat.
On 7/12/2008, Christian Schmidt (Christian.Schmidt@chemie.uni-hamburg.de) wrote:
Setup of Dovecot went smoothly.
Now when I try to retrieve mail from the server, I get the following message:
Security Error: Domain name mismatch
You have attempted to establish a connection to "mail.tib.com" However, the security certificate presented belongs to "imap.example.com".....
How to fix this message?
Re-create your SSL certificate and key and take care that the COmmon Name (CN) is set to your hostname ("mail.tib.com").
Alternatively, he could just set the hostname in dovecot.conf to imap.tib.com and make sure there is a DNS pointer for it, right?
--
Best regards,
Charles
participants (4)
-
Andy Shellam
-
Charles Marcus
-
Christian Schmidt
-
kbajwa