<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Hello,<br/>
<br/>
using letsencrypt ssl certs with san works perfectly with 2.2.34, but<br/>
after uprading to 2.3.4.1 it couldn't verified (also tried v2.3.7.1).<br/>
<br/>
i connect to imap.myserver.lan<br/>
<br/>
the cn of the cert is myserver.lan and has the san imap.myserver.lan<br/>
<br/>
openssl s_client -connect imap.myserver.lan:993<br/>
CONNECTED(00000005)<br/>
depth=0 CN = imap.myserver.lan<br/>
verify error:num=20:unable to get local issuer certificate<br/>
verify return:1<br/>
depth=0 CN = imap.myserver.lan<br/>
verify error:num=21:unable to verify the first certificate<br/>
verify return:1<br/>
---<br/>
Certificate chain<br/>
0 s:CN = imap.myserver.lan<br/>
i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3</div>
<div> </div>
<div>if i cat ssl_ca and ssl_cert into one file and only use ssl_cert it's working with 2.3.X</div>
<div>ssl_ca = </etc/ssl/ca-bundle.pem<br/>
ssl_cert = </etc/ssl-imap.pem</div></div></body></html>