Date: Wed, 13 Jul 2005 23:46:33 +0300 From: vladone vladone@spaingsm.com Subject: [Dovecot] problem with server certificate: dovectot.pem

I have an mail server with postfix and dovecot. All works fine, but now is change my domain. After changed configurations i can receive (or send) mail without STARTTLS, but when i try to use this option i receive: "TLS handshake failure. Invalid server certificate (Key material mismatch)"

I dont know what is this. I use certificate that is generate with script for dovecot (that work at begining). Even i try to rebuild this certificate acording with new domain but nothing. Where is my problem?

Yes, of course. Certificates are made out to a particular hostname (e.g. smtp.wahtever.com), and if you change your server hostname or move it to another server, a new certificate will have to be made out to the new hostname.

You could also configure your client ignore certificate mismatches, but this wouldn't be the best option.

Joseph Tam tam@math.ubc.ca