Upgrading to v2.3.X breaks ssl san?

Aki Tuomi aki.tuomi at open-xchange.com
Wed Aug 7 20:24:13 EEST 2019


> On 07/08/2019 14:28 telsch <telsch at gmx.de> wrote:
> 
>  
> with v2.2.34 i can use:
> 
> ssl_ca = </etc/ssl/ca-bundle.pem
> ssl_cert = </etc/ssl-imap.pem
> 
> after upgrade to v2.3.X it doesn't work like before.
> 
> it's working if i manual cat ca-bundle.pem and ssl-imap.pem into one
> file and using only:
> 
> ssl_cert = </etc/ssl-imap.pem
> 
> i thought ssl_ca is where to put the intermediate cert?

(Sorry for duplicate mail, keyboard acted up...)

No, that has always been a mistake and it was fixed in 2.3. Our SSL pages in documentation & wiki have always recommended concatenating the intermediates with the cert.

Aki


More information about the dovecot mailing list