Just wanted to see a couple of things regarding email SSL, had an issue with outlook and expired cert, went to list email within cyberpanel GUI and pressed the fix button that popped up and said there was an issue and everything started working.
Where are the encryption certs located for the mail server, on the sub domain eg.mail.mydomain.com.au or the mail domain or elsehere as they where both still valid, mail.domain renewed same day as expired one outlook picked up as expired.
also if you go to issue ssl for mail server are you ment to issue for mail.mydomain.com.au or mydomain.com.au if it doesnt renew.
this is only really for referance in the future ill see if it all plays up in 90 days when the certs expire again.
To issue ssl for mailserver choose your mailserver domain. In popular circumstances the mailserver domain is mail.mydomain.com
Say you have domain.com domain.com certs are here /etc/letsencrypt/live/domain.com mail.domain.com certs are here /etc/letsencrypt/live/mail.domain.com subdomain.domain.com certs are here /etc/letsencrypt/live/subdomain.domain.com
I had problem that my ssl expired, cyberpanel issued new certificate for website, but for some reason my mail.example.com didn’t. I tried this command: postmap -F hash:/etc/postfix/vmail_ssl.map and that fixed my problem for now, but I think that problem re appears after sertificate expires again.
Had the same issue again when the cert expired and it was only fixed with the command. command: postmap -F hash:/etc/postfix/vmail_ssl.map and that fixed my problem. Why do I have to do this every 3 months the cert auto renews no issues. Any ideas would be great.
The TLS encryption protocol’s SNI that allows a client to perform a TLS handshake needs its table rebuilt every time SSL certificate is renewed. This is a good solution by Postmap as it solves the so common issue on ThunderBird and Outlook “common name mismatch error”
Is there a way I can get it to do the command automacatlly when every the cert is renewed. Or what do I do with the bug, I had a website where a forgot my password link was failing because of the miss match cert date wasn’t updating.