<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello all,<div class=""><br class=""></div><div class="">I have a Dovecot (v2.3.10.1) + Postfix (v3.5.3) both cfg; d to use TLS however each using different certificates. In addition, I have cfg’d a DNS CNAME that points to the server A record. For example,</div><div class=""><br class=""></div><div class=""><ul class="MailOutline"><li class=""><a href="http://mail.example.com" class="">mail.example.com</a> (A) —> 1.2.3.4</li><li class="">alias.example.con (CNAME) —> <a href="http://mail.example.com" class="">mail.example.com</a></li></ul></div><div class=""><br class=""></div><div class="">When setting up a new account in Apple Mail, if I specify the server name as the “Host Name” (i.e. mil server), the cert that is cfg’d in Dovecot is received and everything works fine. However, if I instead use the alias CNAME as the “Host Name”, then the cert for Postfix is sent to the client. This causes issues because I do not have the CNAME in the SAN of the Postfix certificate.</div><div class=""><br class=""></div><div class="">I doubt this is a bug because I have to think others have employed a similar configuration so I must be missing something here — any thoughts?</div><div class=""><br class=""></div><div class="">Thanks in advance...</div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>