Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 16 Sep 2013, Reindl Harald wrote: the main question was why deal with different server names at all and not about IPv4 and how many IP addresses you get because many companies want to show up as single entity and some users are believed t

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Reindl Harald
Am 16.09.2013 13:52, schrieb Jeroen Massar: > On 2013-09-16 13:36, Reindl Harald wrote: >> the main question remains: >> >> * why is anybody doing this? > > Because IPv4 addresses are running out (or harder/pricy to get) and not > all clients on IPv4 yet and thus you will have to have multiple c

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Shadi Habbal
@Jeroen: very well explanation, thank you very much. The company I work for rented a VPS through digitalocean.com, and DO don't yet provide more than 1 IP per droplet (vps). The company have few domains with few services, but, different business types and different associates. They can't real

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Jeroen Massar
On 2013-09-16 13:36, Reindl Harald wrote: > > > Am 16.09.2013 13:33, schrieb Shadi Habbal: >> After some digging, Subject Alternative Names (SANs) is the way to have one >> certificate which holds many domain names in the SubjectAltNames field >> Here is a script to generate a CSR that holds dif

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Reindl Harald
Am 16.09.2013 13:33, schrieb Shadi Habbal: > After some digging, Subject Alternative Names (SANs) is the way to have one > certificate which holds many domain names in the SubjectAltNames field > Here is a script to generate a CSR that holds different SANs: > http://svn.cacert.org/CAcert/Softwa

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Shadi Habbal
After some digging, Subject Alternative Names (SANs) is the way to have one certificate which holds many domain names in the SubjectAltNames field. Here is a script to generate a CSR that holds different SANs: http://svn.cacert.org/CAcert/Software/CSRGenerator/csr For more information: http://w

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-16 Thread Anton Dollmaier
Hi, why do people waste their time with such useless things instead setup "mail.yourcompany.tld" and tell every user exactly tjis hostname? Could also bei simplefied by using AutoDiscovery (MS) or autoconfig (Thunderbird, Evolution). e.g. by setting up www.automx.org. servernames in cas

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-15 Thread Shadi Habbal
Simply put, didn't know it was a limitation of POP3s. Note taken. Thanks > Date: Mon, 16 Sep 2013 00:09:46 +0200 > From: h.rei...@thelounge.net > To: dovecot@dovecot.org > Subject: Re: [Dovecot] Dovecot replies with default SSL certific

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-15 Thread Reindl Harald
Am 15.09.2013 23:45, schrieb Shadi Habbal: > I'm using dovecot v2.0.21. > > According to http://wiki2.dovecot.org/SSL/DovecotConfiguration, > dovecot 2.x supports different SSL certificate for different virtual hosts by > using "local_name" directive, but I can't get it to work. > > When testi

Re: [Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-15 Thread Shadi Habbal
Sorry for the mess, forgot to change the formatting to plain text. I'm using dovecot v2.0.21. According to http://wiki2.dovecot.org/SSL/DovecotConfiguration, dovecot 2.x supports different SSL certificate for different virtual hosts by using "local_name" directive, but I can't get it to work.

[Dovecot] Dovecot replies with default SSL certificate instead of the vhost's

2013-09-15 Thread Shadi Habbal
Hello, I'm using dovecot v2.0.21. According to http://wiki2.dovecot.org/SSL/DovecotConfiguration,dovecot 2.x supports different SSL certificate for different virtual hosts by using "local_name" directive, but I can't get it to work. When testing the certificate using "openssl s_client -connect do