mauri...@caloro.ch: > Hello > > I have little problem to bring my TLS with Postfix running, if check the > result on Checktls.com i have Cert Fail, > > Here i have a lot of my configuration settings, need little help to finish > this integration. > > > > Debian 9, Postfix Version = 3.1.14, Dovecot 2.2.27 (c0f36b0), OpenSSL 1.1.1g > 21 Apr 2020 > > > > Certificate 1 of 2 in chain: Cert VALIDATION ERROR(S): self signed > certificate in certificate chain > > So email is encrypted but the recipient domain is not verified > > Cert Hostname VERIFIED (nmail.caloro.ch = nmail.caloro.ch) > Not Valid Before: Jun 8 19:09:45 2020 GMT > Not Valid After: Jun 8 19:09:45 2021 GMT > subject= /C=CH/ST=Luzern/O=Caloro/OU=IT/CN=nmail.caloro.ch > issuer= /C=CH/ST=Luzern/L=Meierskappel/O=Caloro/OU=IT/CN=nmail.caloro.ch > > Certificate 2 of 2 in chain: Cert VALIDATION ERROR(S): self signed > certificate in certificate chain > > So email is encrypted but the recipient domain is not verified
It is a 'self-signed' certificate. If you believe that the certificate needs to be verifiable, you can pay a commercial certificate provider, or you can use letsencrypt (https://letsencrypt.org) to sign a free certificate for you. There are instructions for many mail servers including Postfix. Wietse
