Re: [exim] Wildcard CN verify error

Top Page
Delete this message
Reply to this message
Author: Jasen Betts
Date:  
To: exim-users
Subject: Re: [exim] Wildcard CN verify error
On 2023-04-18, Lance Lovette via Exim-users <exim-users@???> wrote:
> I'm getting an SSL verify error for messages delivered through my ESP :
>
>     SSL verify error: certificate name mismatch: DN="/C=US/ST=Texas/L=San
> Antonio/O=MAILGUN TECHNOLOGIES, INC/CN=*.mailgun.org" H="smtp.mailgun.com"

>
> Based on Jeremy's comment in this old bug report, the wildcard CN isn't an
> issue.
>
>     https://bugs.exim.org/show_bug.cgi?id=2011

>
> Is there a particular configuration option I need to set to get it to
> verify?


Use "smtp.mailgun.org" instead of "smtp.mailgun.com"

smtp.mailgun.com is a cname pointing to smtp.mailgun.org. but they
have not deployed a TLS cert for smtp.mailgun.com orly .org

--
Jasen.
🇺🇦 Слава Україні