<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>You need to provide a global certificate as well.</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">---<div>Aki Tuomi</div><div>Dovecot oy</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Nicolas <nicolas@shivaserv.fr> </div><div>Date: 29/08/2018 17:41 (GMT+02:00) </div><div>To: dovecot@dovecot.org </div><div>Subject: SNI Dovecot </div><div><br></div></div><div data-html-editor-font-wrapper="true" style="font-family: arial, sans-serif; font-size: 13px;"> <p>Hi all,<br><br>I'm testing the SNI configuration from dovecot's wiki page, to have multiple domains.<br><br>I'm using letsencrypt certificates.<br> </p> <p>On the 10-ssl.conf, when I only use one domain, like this, it works :<br><br>ssl_ca = </etc/letsencrypt/live/mail.mydomain.fr/chain.pem<br>ssl_cert = </etc/letsencrypt/live/mail.mydomain.fr/cert.pem<br>ssl_key = </etc/letsencrypt/live/mail.mydomain.fr/privkey.pem<br><br>I got a warning of course when using my second domain, mydomain2.fr.<br><br>If I do the config :<br><br>local_name mail.mydomain.fr {<br>ssl_ca = </etc/letsencrypt/live/mail.mydomain.fr/chain.pem<br>ssl_cert = </etc/letsencrypt/live/mail.mydomain.fr/cert.pem<br>ssl_key = </etc/letsencrypt/live/mail.mydomain.fr/privkey.pem<br>}<br><br>local_name mail.mydomain2.fr {<br>ssl_ca = </etc/letsencrypt/live/mail.mydomain2.fr/chain.pem<br>ssl_cert = </etc/letsencrypt/live/mail.mydomain2.fr/cert.pem<br>ssl_key = </etc/letsencrypt/live/mail.mydomain2.fr/privkey.pem<br>}<br><br>I got this on dovecot's start :<br><br>dovecot[930]: master: Error: service(imap-login): command startup failed, throttling for 8 secs<br>dovecot[932]: imap-login: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY<br><br>It's working without local_name, so why it can be a certificate issue?<br><br>Any idea?<br><br>I'm using dovecot 2.2.27-3+deb9u2 from debian.<br><br><br><br>Thanks,<br><signature>Nicolas</signature></p> </div></body></html>