Different SSL certificates per IP and protocol

tree tree at dreamstand.com
Mon Nov 17 15:20:24 UTC 2014


Hi Dovecot Users and Developers,

I am hosting the server with multiple domains.

I have setup the dovecot with the instructions from 
http://wiki2.dovecot.org/SSL/DovecotConfiguration


Each domain has it's own ip address.  However, when I connect via 
Thunderbird or any other mail clients, the client is ONLY picking up the 
top-level "default" ssl_key and ssl_cert and the certificat in 
/etc/ssl/dovecot.pem

Is this a bug?

This is on Debian Wheezy.  Any help pointing in the right direction 
would be appreciated thanks.

Here is the ssl section:
-----------
ssl_cert = </etc/ssl/dovecot.pem
ssl_key = </etc/ssl/dovecot.pem
local 192.0.2.10 { # instead of IP you can also use hostname, which will 
be resolved
   protocol imap {
     ssl_cert = </etc/ssl/dovecot/imap-01.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/imap-01.example.com.key.pem
   }

   protocol pop3 {
     ssl_cert = </etc/ssl/dovecot/pop-01.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/pop-01.example.com.key.pem
   }
}

local 192.0.2.20 {
   protocol imap {
     ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/imap-02.example.com.key.pem
   }

   protocol pop3 {
     ssl_cert = </etc/ssl/dovecot/pop-02.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/pop-02.example.com.key.pem
   }
}
-----------------------




More information about the dovecot mailing list