Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Timothy Murphy
Peter wrote: > On 03/04/2015 08:12 AM, Timothy Murphy wrote: >> My question is simply: Does one require a separate cert for dovecot? > > Dovecot does not care if you use the same cert for other applications. Thank you, that was my question. > Your question is missing the point, others are tryin

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Peter
On 03/04/2015 08:12 AM, Timothy Murphy wrote: > My question is simply: Does one require a separate cert for dovecot? Dovecot does not care if you use the same cert for other applications. Your question is missing the point, others are trying to tell you that the real issue is that the cert was no

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread m . roth
Timothy Murphy wrote: > Jason Pyeron wrote: > >>> I'm getting endless complaints about my dovecot cert, >> >> Exact message please? > > The certificate does not apply to the given host This one indicates, I believe, that when you created the certs, you didn't use the hostname of the system that yo

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Jason Pyeron
> -Original Message- > From: Timothy Murphy > Sent: Tuesday, March 03, 2015 14:19 > > Greg Bailey wrote: > > >> I'm really just asking if I cannot just use what I take to be > >> the standard openssl certificate and key in /etc/pki/tls/ > >> Do I really have to create up a special cert fo

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Timothy Murphy
Greg Bailey wrote: >> I'm really just asking if I cannot just use what I take to be >> the standard openssl certificate and key in /etc/pki/tls/ >> Do I really have to create up a special cert for dovecot? > There's not really a "standard" SSL certificate. Perhaps you're > referring to a "defaul

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Timothy Murphy
Jason Pyeron wrote: >> I'm really just asking if I cannot just use what I take to be >> the standard openssl certificate and key in /etc/pki/tls/ >> Do I really have to create up a special cert for dovecot? > > It depends on what you mean by special and was it done properly the first > time. The

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Jason Pyeron
> -Original Message- > From: Timothy Murphy > Sent: Tuesday, March 03, 2015 10:13 > > Jason Pyeron wrote: > > >> I'm getting endless complaints about my dovecot cert, > > > > Exact message please? > > The certificate does not apply to the given host So lets deal with this first. What

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Greg Bailey
On 03/03/2015 08:12 AM, Timothy Murphy wrote: Jason Pyeron wrote: I'm getting endless complaints about my dovecot cert, Exact message please? The certificate does not apply to the given host The certificate is not signed by any trusted certificate authority Do I really have to use a separat

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Timothy Murphy
Jason Pyeron wrote: >> I'm getting endless complaints about my dovecot cert, > > Exact message please? The certificate does not apply to the given host The certificate is not signed by any trusted certificate authority >> Do I really have to use a separate cert and key for dovecot? >> Can I not

Re: [CentOS] Ignorant question on SSL certs

2015-03-03 Thread Jason Pyeron
> -Original Message- > From: Timothy Murphy > Sent: Tuesday, March 03, 2015 9:55 > > I'm getting endless complaints about my dovecot cert, Exact message please? > /etc/pki/dovecot/certs/dovecot.pem > which I created years ago following the dovecot instructions. > > Do I really have to u