> On 20. Mar 2024, at 04:45, Jerry Stuckle via Exim-users > <exim-users@lists.exim.org> wrote: > Hi, all, > > I'm a noob with Exim and am trying to implement TLS on the POP3 port but am > running into problems. > > First of all, this is a test system on our local network to test Exim > configurations. It is not accessible from the internet. > > I got a free SSL certificate but am having problems implementing it. It came > as certificate.crt and private.key. It also contained ca_bundle.crt. > > I point tls_certificate and tls_privatekey to the appropriate files and this > works fine. However, without the ca_bundle.crt file MUAs thing this is a > self-signed certificate. > > I'm having problems trying to get the ca_bundle.crt part of the whole > shebang. I tried concatenating certificate.crt to ca_bundle.crt but that > gave me an "invalid certificate" error. > > Searches have been less then helpful, probably because I'm not sure wht I'm > looking for. Can anyone point to how to get everything working?
Use https://whatsmychaincert.com/, put in your certificate and get a file with a correct full chain with or without root back. Works like a charm. Niels
smime.p7s
Description: S/MIME cryptographic signature
-- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
