Upgrading to v2.3.X breaks ssl san?
Aki Tuomi
aki.tuomi at open-xchange.com
Wed Aug 7 20:24:13 EEST 2019
> On 07/08/2019 14:28 telsch <telsch at gmx.de> wrote:
>
>
> with v2.2.34 i can use:
>
> ssl_ca = </etc/ssl/ca-bundle.pem
> ssl_cert = </etc/ssl-imap.pem
>
> after upgrade to v2.3.X it doesn't work like before.
>
> it's working if i manual cat ca-bundle.pem and ssl-imap.pem into one
> file and using only:
>
> ssl_cert = </etc/ssl-imap.pem
>
> i thought ssl_ca is where to put the intermediate cert?
(Sorry for duplicate mail, keyboard acted up...)
No, that has always been a mistake and it was fixed in 2.3. Our SSL pages in documentation & wiki have always recommended concatenating the intermediates with the cert.
Aki
More information about the dovecot
mailing list