[exim] Re: SSL Certificates

Top Page
Delete this message
Reply to this message
Author: Niels Kobschätzki
Date:  
To: Jerry Stuckle
CC: exim-users
Subject: [exim] Re: SSL Certificates

> On 20. Mar 2024, at 04:45, Jerry Stuckle via Exim-users <exim-users@???> wrote:
> Hi, all,
>
> I'm a noob with Exim and am trying to implement TLS on the POP3 port but am running into problems.
>
> First of all, this is a test system on our local network to test Exim configurations. It is not accessible from the internet.
>
> I got a free SSL certificate but am having problems implementing it. It came as certificate.crt and private.key. It also contained ca_bundle.crt.
>
> I point tls_certificate and tls_privatekey to the appropriate files and this works fine. However, without the ca_bundle.crt file MUAs thing this is a self-signed certificate.
>
> I'm having problems trying to get the ca_bundle.crt part of the whole shebang. I tried concatenating certificate.crt to ca_bundle.crt but that gave me an "invalid certificate" error.
>
> Searches have been less then helpful, probably because I'm not sure wht I'm looking for. Can anyone point to how to get everything working?


Use https://whatsmychaincert.com/, put in your certificate and get a file with a correct full chain with or without root back.

Works like a charm.

Niels
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/