RE: TLS Connections Between Dovecot & MariaDB

2025-01-25 Thread Marc via dovecot
> > It is - that's just "belt and braces" stuff (also known as "defence in > depth" :-) ) It is good to limit to just your own ca. I do this with the ldap. Was just not expecting it from someone having users stored in mariadb and having virtual users and then worrying about CA's credibility. If

Re: TLS Connections Between Dovecot & MariaDB

2025-01-25 Thread duluxoz via dovecot
It is - that's just "belt and braces" stuff (also known as "defence in depth" :-) ) My *real* issue (if I understand things correctly - which, there's a significant chance that I don't) is telling dovecot which TLS certificate to use to connect to the MariaDB back-end. Mind you, that's *not*

RE: TLS Connections Between Dovecot & MariaDB

2025-01-25 Thread Marc via dovecot
> > I'm using a MariaDB backend to a Dovecot server, with TLS required by > the MariaDB server for connections. > > My sql_dovecot.conf.ext file is using the following connection line: > `connect = host=mariadb.example.com dbname=mail_server user=vmail > password={REDACTED} ssl_ca=/etc/pki/tls/ce

TLS Connections Between Dovecot & MariaDB

2025-01-24 Thread duluxoz via dovecot
Hi All, I'm using a MariaDB backend to a Dovecot server, with TLS required by the MariaDB server for connections. My sql_dovecot.conf.ext file is using the following connection line: `connect = host=mariadb.example.com dbname=mail_server user=vmail password={REDACTED} ssl_ca=/etc/pki/tls/cer