Allow email clients to use SSL

[carljohanlarsson]

Hi all, newbie question here.

I have set up a VPS and I'm using DirectAdmin, everything works great but...

I can't connect to my email accounts (from the client) using SSL.

I have certs that are valid, but I suspect that there is some setting missing somewhere?

Or am I way off?

Any assistance would be appreciated.

 

[Richard G]

I have certs that are valid

Exactly which certs do you have an do you also have certs on mail or only www?

Did you check and verified with the docs?

Let's Encrypt For Domains | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

and

Automatic TLS Certificate For Server Hostname | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

Also, be sure the values like mail_sni=1 and enable_ssl_sni=1 and letsencrypt=1 is present in your directadmin.conf file for example.

 

[carljohanlarsson]

Also, be sure the values like mail_sni=1 and enable_ssl_sni=1 and letsencrypt=1 is present in your directadmin.conf file for example.

Ahh, thats what I needed to move forward. I have no idea if it will fix the problem but now I know what to look for. Many thanks!

 

[Richard G]

You're welcome. Just let us know if you run into any issues.

 

[Wanabo]

enable_ssl_sni=1 is present in your directadmin.conf file for example.

enable_ssl_sni=1 is not present in my directadmin.conf file. The other values are.
After adding enable_ssl_sni=1 to directadmin.conf is a restart of DA enough or do I need to rebuild?

 

[Richard G]

Normally restarting DA would be enough if I'm not mistaken, but enable_ssl_sni is for websites. Odd enough it's not mentioned in the docs of all directadmin.conf values.
Maybe @scriptkitty can add this?

On new installations since 1.51.4 this defaults to 1.

Seems I forgot an important one for mail.
For mail also the setting mail_sni=1 should be present.
not sure if that is also a default nowadays.

Can't hurt anyway to rebuild exim and dovecot just to be sure.

 

[k1l0b1t]

Normally restarting DA would be enough if I'm not mistaken, but enable_ssl_sni is for websites. Odd enough it's not mentioned in the docs of all directadmin.conf values.
Maybe @scriptkitty can add this?

On new installations since 1.51.4 this defaults to 1.

Seems I forgot an important one for mail.
For mail also the setting mail_sni=1 should be present.
not sure if that is also a default nowadays.

Can't hurt anyway to rebuild exim and dovecot just to be sure.

Don't forget exim_conf

 

[Richard G]

Don't forget exim_conf

I don't think the exim_conf changes anything in this, but it can never hurt to include that too. Then also dovecot_conf.