My domain is: antiochtechnologies.com My web server is (include version): apache 2.4.18 The operating system my web server runs on is (include version): ubuntu 16.04 I can login to a root shell on my machine (yes or no, or I don't know): yes I'm using a control panel to manage my site (no, or pr…

[image] antioch: could i just tell dovecot to use /etc/letsencrypt/live/antiochtechnologies.com/fullchain.pem? If you're sure that's the correct certificate (compair /etc/webmin/letsencrypt-cert.pem and /etc/letsencrypt/live/antiochtechnologies.com/cert.pem): yes

You’re not sending an intermediate certificate. Your Dovecot configuration should include the intermediate certificate.

added the following to /etc/dovecot/conf.d/10-ssl.conf, even though the comments in the file say to only do so when performing client certificate checking. seems to have resolved the issue. ssl_ca = </etc/webmin/letsencrypt-ca.pem

not that i can see in /etc/webmin. just the ca, cert and key files.

Did webmin create those files? Or did certbot? B/c you’re also citing version 0.27 of certbot?

webmin just implemented certbot, requiring me to install it. but i never use it directly. webmin continues to handle the requesting and renewals…just now using certbot as i understand it.

Ah, I see. Unfortunate. The webmin code indeed doesn’t include the fullchain.pem provided by certbot . Two options if you don’t want to use ssl_ca (I wouldn’t recommend it, just like the Dovecot devvers don’t recommend it): Patch the webmin source code to include fullchain.pem in /etc/webmin Plac…

[image] Osiris: ...in the certbot renewal configuration file of the certificate name used by webmin is the location of this file a webmin question?

[image] antioch: is the location of this file a webmin question? I don't know if webmin manipulates certbot in a way the location of that file is different than the default location. Normally, one would find the renewal configuration files of certbot in /etc/letsencrypt/renewal with subdirect…

that folder only contains conf files for the webmin domain and each virtualmin domain. however, in antiochtechnologies.com.conf, /etc/letsencrypt/live/antiochtechnologies.com/fullchain.pem is referenced. now /etc/letsencrypt/live/antiochtechnologies.com/fullchain.pem turns out to be a symlink to /et…

Mobile clients, SSL alert number 46

Help

Osiris June 2, 2020, 4:50pm 4

Doesn’t webmin provide some combined file like certbot does?

Topic		Replies	Views
Maybe an intermediate certificate is missing? Help	26	6800	October 8, 2021
Dovecot issues regarding: Intermediate/chain certificate to link it to a trusted root certificate Server	9	4980	April 18, 2019
Chain missing or incomplete Help	24	9894	December 24, 2020
Incomplete, Extra intermediate chain certificate Help	9	3006	December 30, 2020
Mail server has new cert but mail app sees old one Help	31	869	March 23, 2024

Mobile clients, SSL alert number 46

Related topics