[pfx] Re: multiple certs for postfix

2024-08-18 Thread Wesley via Postfix-users
On 2024-08-18 00:50, Michael W. Lucas wrote: On Sat, Aug 17, 2024 at 02:11:37PM +0800, Wesley via Postfix-users wrote: Yes. The current hosting I am using is with a simple case: mail.riseup.net smtp.riseup.net Both works via SSL. If the hosts are: mail.foo.com smtp.bar.com That is a more co

[pfx] Re: multiple certs for postfix

2024-08-17 Thread Michael W. Lucas via Postfix-users
On Sat, Aug 17, 2024 at 02:11:37PM +0800, Wesley via Postfix-users wrote: > Yes. The current hosting I am using is with a simple case: > > mail.riseup.net > smtp.riseup.net > > Both works via SSL. > > If the hosts are: > > mail.foo.com > smtp.bar.com > > That is a more complicated case. > Wher

[pfx] Re: multiple certs for postfix

2024-08-17 Thread Benny Pedersen via Postfix-users
Wesley via Postfix-users skrev den 2024-08-17 08:11: Yes. The current hosting I am using is with a simple case: mail.riseup.net smtp.riseup.net Both works via SSL. If the hosts are: mail.foo.com smtp.bar.com That is a more complicated case. Where SNI is maybe required. cartbot --apache -d

[pfx] Re: multiple certs for postfix

2024-08-17 Thread Wesley via Postfix-users
Yes. The current hosting I am using is with a simple case: mail.riseup.net smtp.riseup.net Both works via SSL. If the hosts are: mail.foo.com smtp.bar.com That is a more complicated case. Where SNI is maybe required. Thanks Victor. On 2024-08-17 13:59, Viktor Dukhovni via Postfix-users wro

[pfx] Re: multiple certs for postfix

2024-08-16 Thread Viktor Dukhovni via Postfix-users
On Sat, Aug 17, 2024 at 11:05:43AM +0800, Wesley via Postfix-users wrote: > That’s great. I will look into SNI for postfix. Sure, but do first consider a single certificate with multiple SANs, if at all possible. Particulary for simple use cases, like the one you're looking at: "smtp.example.org

[pfx] Re: multiple certs for postfix

2024-08-16 Thread Wesley via Postfix-users
That’s great. I will look into SNI for postfix. Thanks On 2024-08-17 10:51, John Levine wrote: It appears that Wesley via Postfix-users said: i know there is is a kind of wild certificate for *.example.com. besides that, is it possible to setup multiple separated hosts/certs in postfix?

[pfx] Re: multiple certs for postfix

2024-08-16 Thread John Levine via Postfix-users
It appears that Wesley via Postfix-users said: >i know there is is a kind of wild certificate for *.example.com. >besides that, is it possible to setup multiple separated hosts/certs in >postfix? Somebody else suggested getting a cert with multiple names, which is a reaonable approach if the num

[pfx] Re: multiple certs for postfix

2024-08-16 Thread Michael W. Lucas via Postfix-users
I'd suggest you use a single X.509 certificate with multiple SANs. ACME supports creating such certificates. ==ml On Sat, Aug 17, 2024 at 08:50:37AM +0800, Wesley via Postfix-users wrote: > for submissions service, some providers can use multi-domains for client > access. for example, > > mail.