My domain is: mail.commedia.org.uk I ran this command: openssl s_client -connect mail.commedia.org.uk:25 -showcerts It produced this output: CONNECTED(00000003) 140137382925632:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:331: --- no peer certifica…

[image] ITCrowd: ~$ openssl s_client -connect mail.commedia.org.uk:25 -starttls smtp CONNECTED(00000003) 139953553028416:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:331: --- Looks that you check a different machine, not your port that's online. …

Hi @ITCrowd [image] ITCrowd: openssl s_client -connect mail.commedia.org.uk:25 -showcerts that's not so good. Use openssl s_client -connect mail.commedia.org.uk:25 -starttls smtp Then you see: depth=0 CN = mail.commedia.org.uk verify error:num=21:unable to verify the first certificate …

[image] ITCrowd: openssl s_client -connect mail.commedia.org.uk:25 -showcerts Port 25 is unencrypted, unless you use STARTTLS. You should add the -starttls smtp command to the command line options to openssl. Further more, the certificate chain is missing its intermediate certificate: Certi…

Thank you @JuergenAuer , thank you @Osiris - I had switched off the config temporarily but it is now in place (at 21:40pm GMT) @JuergenAuer I now try this: ~$ openssl s_client -connect mail.commedia.org.uk:25 -starttls smtp CONNECTED(00000003) 139953553028416:error:1408F10B:SSL routines:ssl3_get_re…

@JuergenAuer if I open fullchain.pem then there are two certificates in there - is that correct? Redacted file below. # cat /etc/pki/tls/fullchain.pem -----BEGIN CERTIFICATE----- XXXXXXXXXXXXXXXXXXXJNV8cOYMA0GCSqGSIb3DQEBCwUAZ91/RCF7TWac3HgtSx+yWzmae3CwNgxZ+i3MIF7Drk5eCgtFf4v+MhRSZhC80eY0 +p4OgYE…

Thank you @JuergenAuer and @Osiris - I think that issue is now fixed. Though I might have some other Postfix issues. Regarding the following: PS: Certificates are public, so everyone can load your complete certificate. Hiding is a little bit curious. That's a learning issue and my knowledge is …

Cert VALIDATION ERROR(S): unable to get local issuer certificate

Help

Topic		Replies	Views
Unable to verify fullchain.pem Help	10	4857	November 29, 2020
Certificate verify failed: unable to get local issuer certificate Help	17	7164	August 10, 2023
"unable to get local issuer certificate" Help	5	961	May 29, 2024
Unable to get local issuer certificate Help	4	3573	January 20, 2020
Verify error:num=20:unable to get local issuer certificate Help	48	9210	October 6, 2021

Cert VALIDATION ERROR(S): unable to get local issuer certificate

Related topics