Sorry everyone I found the problem. The wrong cert was specified in my
dovecot.conf file, and I hadn't thought to look there. POPs and IMAPs
seems to be working correctly now.
Thanks anyway!
Sean
On Tue, Sep 1, 2009 at 4:51 PM, Sean<seanvanco@???> wrote:
> I'm new to this list, but I've been using exim for over a year now
> (the server has needed little maintenance so I'm still learning in
> many areas).
>
> I'm hoping that someone can help me with a security certificate
> problem with my exim server. This has worked in the past and I don't
> know why it is not working now.
>
> The situation is that my mail and web servers reside on the same box.
> I have two security certificates installed, one for www.domain.com and
> one for mail.domain.com. I have my exim server configured to use the
> mail.domain.com cert for TLS (exim.conf entries below), but when a
> client (i.e. Outlook or KMail) uses TLS, it says that there is a
> problem with the security cert and that the CN does not match the
> server name. It looks like it is using the www cert instead of the
> mail cert, but I have not found a way to verify this by looking at the
> logs.
>
> exim.conf excerpt:
>
> # SSL/TLS cert and key
> tls_certificate = /etc/exim.cert
> tls_privatekey = /etc/exim.key
>
> tls_advertise_hosts = *
>
> I had my certificate vendor confirm that the security cert listed
> above is the mail.domain.com cert, and I verified it by using openssl
> to output the contents of the two certs.
>
> The error message for Outlook 2002 is as follows:
>
> " the server you are connected to is using a security certificate that
> could not be verified. /n The certificate's name does not match the
> passed value. /n Do you want to continue using this server? Yes/No"
>
> The error message for KMail is similar, but I haven't yet had time
> trigger the error again to get the exact wording.
>
> I'm using Debian Etch 32-bit and exim 4 (the latest version in the
> Debian repositories).
>
> Please let me know if you need anything else. Thank you in advance for any help.
>
>
> Sean
>
