Create SSL Certified only for Postfix

[stevenzhu]

@dgrvedado

But 181.120.215.171 this is only the router of a lan, i have portforwarding in this routert… and the port 80 is a different server of my mailserver.

Is that means the IP 181.120.215.171 has more than one server behind the router? (And port 80 is forwarded to another server in the same subnet?)

P.S
Are both server accessible to each other? (Interconnected..in the same subnet?)

Just trying to make sure....

Thank you

[dgrvedado]

Well i can now generate the certificate, changing the forwarding of the router momentarily. This folder was generate:

How i use this file?

Thank,
David

[JuergenAuer]

Yep, now the certificate is created:

https://transparencyreport.google.com/https/certificates?cert_search_auth=&cert_search_cert=&cert_search=include_expired:false;include_subdomains:false;domain:mail.criterion.com.py&lu=cert_search

Now something like

# file /etc/postfix/main.cf
...
smtpd_tls_cert_file=  /etc/letsencrypt/live/domainname/fullchain.pem
smtpd_tls_key_file=  /etc/letsencrypt/live/domainname/privkey.pem

# File /etc/dovecot/conf.d/10-ssl.conf
...
ssl = yes
ssl_cert = </etc/letsencrypt/live/domainname/fullchain.pem
ssl_key  = </etc/letsencrypt/live/domainname/privkey.pem

should work. Don’t forget to restart both.