TLSA & SMTP setting issues

John01

New member
Joined
Nov 4, 2015
Messages
4
Location
Netherlands
First I will give information about the whole.

Server is Shared server resellers with DirectAdmin, I can't get to anything else with SSH for example. Unfortunately everything has to be done via DirectAdmin.

I give as much information as possible in this topic, so that hopefully nothing is missing from information that is worked with.

The more I search the internet the more confusing everything becomes regarding ports settings what to use with additions as shown below.

_25._tcp.mail.
3 1 1 , 3 0 1, 2 1 1
_25._tcp_mx.
3 1 1 , 3 0 1, 2 1 1
_25._tcp.mx.
3 1 1 , 3 0 1, 2 1 1
_25._tcp.
3 1 1 , 3 0 1, 2 1 1
_443._tcp.host.dane.
3 1 1 , 3 0 1, 2 1 1
_443.tcp
3 1 1 , 3 0 1, 2 1 1

Then use the following

0 - PKIX-TA: Certificate Authority Constraint
1 - PKIX-EE: Service Certificate Constraint
2 - DANE-TA: Trust Anchor Assertion
3 - DANE-EE: Domain Issued Certificate

Selector Field:
0 - Cert: Use full certificate
1 - SPKI: Use subject public key

Matching-Type Field:
0 - Full: No Hash
1 - SHA-256: SHA-256 hash
2 - SHA-512: SHA-512 hash

Which files should I grab to use various ports in settings

The files
File 1
securitycontrolpro_nl.cer is added in Paste a pre-generated certificate and key

FIle 2 both fits into the CA Root Certificate
Sectigo_RSA_Domain_Validation_Secure_Server_CA.crt
File 3
USERTrust_RSA_Certification_Authority.crt

Domain Validation Comodo PositiveSSL

Screenshot_28.png

DNSSEC All green

Screenshot_24.png

TLSA & SMTP

So I can't get the TLSA & SMTP set up at all.

Screenshot_25.png


The problem is the SMTP & the TSLA Record

DirectAdmin records

Screenshot_27.png
 
I have the same problem.
So far I have looked and found the following;

the correct setting at dane is the following

_443._tcp.mail.yourhosting.eu. 3 0 1
_443._tcp.yourhosting.eu. 3 0 1
_443._tcp.www.yourhosting.eu. 3 0 1
_443._tcp.www 3 0 1
_25._tcp.mail.yourhosting.eu. 3 0 1
_25._tcp.yourhosting.eu. 3 0 1
 
Back
Top