On Thu, Jun 16, 2022 at 11:07:05PM +0200, Maurizio Caloro <mauri...@caloro.ch> 
wrote:

> On 13.06.2022 12:05, Benny Pedersen wrote:
> > postfixadmin is make it very more helpness, move both domains to
> > virtual, and make mydestination only for system users, not possible to
> > send direct to from outside of mynetworks
> > 
> > https://www.howtoforge.com/how-to-set-up-a-mail-server-with-postfixadmin-on-debian-11/
> > 
> > 
> > it world work for older debian aswell, atleast not much need to be
> > changed
> 
> Hello and first let me thanks for your message
> 
> Please i need little more input, now installed successfully this two noted
> domains,
> i can mail and runnig with this setup postix,dovecot,mysql, but after little
> tls check
> and test will be noted with cert problem on domain calm-ness, added now this
> signed certificate to main.cf
> 
> after sigend and add to smtp_tld_chain_files will recieve
> the following error.
>     --> Out: 454 4.7.0 TLS not available due to local problem
> 
> [snips from main.cf]
> mydestination = localhost, localhost.$mydomain, nmail.caloro.ch,
> nmail.calm-ness.ch
> 
> smtpd_tls_chain_files =
>      /etc/letsencrypt/live/nmail.caloro.ch/privkey.pem,
>      /etc/letsencrypt/live/nmail.caloro.ch/fullchain.pem,
>      /etc/letsencrypt/live/nmail.calm-ness.ch/fullchain.pem,
>      /etc/letsencrypt/live/nmail.calm-ness.ch/privkey.pem,
>      /etc/letsencrypt/live/nmail.caloro.ch-ecdsa/privkey.pem,
>      /etc/letsencrypt/live/nmail.caloro.ch-ecdsa/fullchain.pem[]
> [break]
> 
> Transcript of session follows.
> 
>  Out: 220 nmail.caloro.ch ESMTP Postfix (Debian/GNU)
>  In:  EHLO www11-do.CheckTLS.com
>  Out: 250-nmail.caloro.ch
>  Out: 250-PIPELINING
>  Out: 250-SIZE 25428800
>  Out: 250-ETRN
>  Out: 250-STARTTLS
>  Out: 250-ENHANCEDSTATUSCODES
>  Out: 250-8BITMIME
>  Out: 250-DSN
>  Out: 250 CHUNKING
>  In:  STARTTLS
>  Out: 454 4.7.0 TLS not available due to local problem
>  In:  QUIT
>  Out: 221 2.0.0 Bye
> 
> thanks

Try deleting the middle two files (nmail.calm-ness.ch),
or swapping them around. They are in the wrong order.

cheers,
raf

Reply via email to