Request: Letsencrypt feature for easy adding an SSL certificate to Exim and Dovecot

[swisshuttles]

Hi,

Wouldn't it be great to have a feature to automatically add an Letsencrypt certifcate to Exim and Dovecot? Did read about other users which are facing similar issues: http://forum.directadmin.com/showthread.php?t=52802

 

[Tristan]

Yes that would be great when creating a Letsencrypt certificate on a user account the mail.domainname.tld would always be linked to Exim and Dovecot as well. So when this user sets up mail.domainname.tld he can securely connect to Dovecot to check and Exim to send his mail without getting a notification about the certificate name mismatch.

 

[SeLLeRoNe]

For Dovecot has already been done, in the next release will be there.
For exim there is a thread for that, DA is aware of that and they're probably working at it.

Please read here: http://forum.directadmin.com/showthread.php?t=53967&highlight=exim_sni

Best regards

 

[Tristan]

Found the feature for Dovecot in the version history now as well:

https://www.directadmin.com/features.php?id=1889

Fingers crossed for Exim!

 

[ditto]

I have all my customers use their email clients with my servers hostnames wich I have secured with ssl. So I guess in my case it is best not to enable this. I am not sure if it will do any harm for my customers use of hostname for imap/smtp if I enable this?

 

[Tristan]

If they're already using your hostname it shouldn't make a difference I would think, this only gives you the option to say they could connection though their own domain name to Dovecot as well. Please not you need to have DirectAdmin 1.502 by the way.

 

[SeLLeRoNe]

No, not at all, because the hostname will still have it's own certificate (the server one) and if specified a domain it will have it's own config.

See here:

cat /etc/dovecot/conf.d/95-DOMAIN.TLD.conf
local_name DOMAIN.TLD {
  ssl_cert = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.cert.combined
  ssl_key = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.key
}
local_name imap.DOMAIN.TLD {
  ssl_cert = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.cert.combined
  ssl_key = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.key
}
local_name mail.DOMAIN.TLD {
  ssl_cert = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.cert.combined
  ssl_key = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.key
}
local_name pop.DOMAIN.TLD {
  ssl_cert = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.cert.combined
  ssl_key = </usr/local/directadmin/data/users/USER/domains/DOMAIN.TLD.key
}