[Dovecot] Two server certificates for two common names

Ed W lists at wildgooses.com
Wed Aug 26 01:03:43 EEST 2009


Patrick Domack wrote:
> That is an ssl imposibility, and the current tls clients can't really 
> do that either. The best way to do it is to use seperate ip's for 
> mail1 and mail2.
>
> The only other option is to use a new certificate with 
> subject-alt-names, but lots of email clients don't support that. 
> Webbrowsers have for a long time now, but email is completely different.

I would be interested to hear which mail clients don't support this?

My experience is that the main culprits are ok (including apple and many 
handhelds).

I use a cheapo S-A-N from GoDaddy and it seems to work ok (but I hardly 
have a wide range of clients using it)

Hope this helps?

Ed W


More information about the dovecot mailing list