[exim] Re: SSL Certificates

Góra strony
Delete this message
Reply to this message
Autor: Ian Z via Exim-users
Data:  
Dla: exim-users
Temat: [exim] Re: SSL Certificates
On Tue, Mar 19, 2024 at 11:40:05PM -0400, Jerry Stuckle via Exim-users wrote:

> I got a free SSL certificate but am having problems implementing it.
> It came as certificate.crt and private.key. It also contained
> ca_bundle.crt.


> I point tls_certificate and tls_privatekey to the appropriate files
> and this works fine. However, without the ca_bundle.crt file MUAs
> thing this is a self-signed certificate.


> I'm having problems trying to get the ca_bundle.crt part of the
> whole shebang. I tried concatenating certificate.crt to
> ca_bundle.crt but that gave me an "invalid certificate" error.


My guess: ca_bundle.crt already contains certificate.crt as a substring,
i.e. it is what the web world terms "fullchain" certificate. You can check
this with the naked eye.

--
Ian

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/