Exim and cert

Phenix

Phenix

Verified User
Joined
Oct 16, 2006
Messages
40
Location
Poland / Deutschland
Hello,

I have a question:

How to do that clients connecting to the server exim always have a certificate signed by a trusted certification authority? exim server is the only one. place on the certificate is only one domain and customers is much different ...
- The idea is to not have a mail programs approved security exceptions.

Do you buy a signed certificate for the server host? Certificate Error is caused by lack of signature by the trusted center or not the domain of compliance?

How does it solve?

Regards A.K.
 
Last edited:
If you want your customers to use HOSTNAME as SMTP Server you need to buy a cert for HOSTNAME.

Otherwise, if your customers does use mail.domain.tld so you will need a cert for each mail.domain.tld

If you use a cert for HOSTNAME and customers use mail.domain.tld will get complained about "not matching name betwen smtp server and hostname in cert).

Regards
 
So how can I compel exim and users to connect to the server host? My attempts to merge the specific e-mail accounts on the mail server address other than that what they have assigned to your account - have produced no effect - you could not I connect to.

- and if I was buying certificates for each client and his domain - how they connect to mail servers? It will be a lot of certificates for multiple domains for multiple clients? In exim I have only one location for one certificate.
 
Last edited:
You dont need to recompile exim, just need to buy a cert and put it (with related chains) to the exim cert file.

Regarding customers, you cant force them to use the hostname, just suggest them to prevent any kind of "warning" for the certificate.

"My attempts to merge the specific e-mail accounts on the mail server address other than that what they have assigned to your account - have produced no effect - you could not I connect to. "

I didnt get this part, what do you mean?

Regards
 
Trying to connect you to an email account for domain.com, but the address hostname - I always have error logging. it looks as if I could not connect to the e-mail account at a different address than the one with the hosting account user.
why ask so many questions to understand how do I do if I can not login.

--------EDIT------

Sorry, my mistake - not noticed from my Macintosh computer certificate is not approved and later mistaken password to the account on which I tested the connection with the hostname.

Everything works and I infused hostname to customers whose will add a signed certificate. So many questions and all through my stupid mistake - sorry for the trouble.
 
Last edited:
You must log in or register to reply here.
Back
Top