On Tue, Mar 19, 2024 at 11:40:05PM -0400, Jerry Stuckle via Exim-users wrote:
> I got a free SSL certificate but am having problems implementing it.
> It came as certificate.crt and private.key. It also contained
> ca_bundle.crt.
> I point tls_certificate and tls_privatekey to the appropriate files
> and this works fine. However, without the ca_bundle.crt file MUAs
> thing this is a self-signed certificate.
> I'm having problems trying to get the ca_bundle.crt part of the
> whole shebang. I tried concatenating certificate.crt to
> ca_bundle.crt but that gave me an "invalid certificate" error.
My guess: ca_bundle.crt already contains certificate.crt as a substring,
i.e. it is what the web world terms "fullchain" certificate. You can check
this with the naked eye.
--
Ian
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/