On 2017-09-11 11:21, Dominic Raferd wrote:
Does anyone know a way to detect if the certificate currently being
used by Postfix and/or Dovecot is nearing expiry (esp. in case they
haven't picked up the updated letsencrypt certificate)?
You mean like this from the letsencrypt forum
adapted for submission on port 587 with starttls:
openssl s_client -connect yourdomain.tld:587 -starttls smtp -servername
yourdomain.tld 2>/dev/null | openssl x509 -noout -dates
https://community.letsencrypt.org/t/it-there-a-command-to-show-how-many-days-certificate-you-have/11351/2
--
Christian Kivalo
