Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Viktor Dukhovni
On Wed, Mar 26, 2014 at 11:21:32PM +0100, Pau Peris wrote: > Just one last question. Do you think I could set postfix to use multiple > certificates and their respective private keys so when a client connects > to example.com Postfix makes use of example.crt certificate but when > connecting to ex

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Pau Peris
Hi Viktor, Thank you very much. Yo're awesome help!! Last, yes, i mis belief my findings jejeje I just feel out of business here. Thanks again. Sent from my Android mobile, excuse the brevity. On Mar 26, 2014 11:00 PM, "Viktor Dukhovni" wrote: > On Wed, Mar 26, 2014 at 10:51:29PM +0100, Pau P

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Viktor Dukhovni
On Wed, Mar 26, 2014 at 10:51:29PM +0100, Pau Peris wrote: > Are you really sure? I mean, do you know where can i find information about > this topic? Do you disbelive you own findings? You report that the same certificate is accepted when the MUA is configured to connect to the subject commonNa

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread li...@rhsoft.net
the problem is that you can't control what the client expects there are a lot of clients, recent and outdated rule of thumbs: avoid all that domain-specific crap in caes of mail and just use and communicate "mail.yourdomain.tld" indepdendent what domains you are hosting - that scales and works in

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Pau Peris
Are you really sure? I mean, do you know where can i find information about this topic? As i planned to operate that way, buying cheap ssl certs for multiple domains/subdomains i would like to be sure before discarding that procedure. Thanks a lot!! Sent from my Android mobile, excuse the brevity

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Viktor Dukhovni
On Wed, Mar 26, 2014 at 09:13:58PM +0100, Pau Peris wrote: > Common Name (CN) we.webeloping.es > > X509v3 Subject Alternative Name: > DNS:webeloping.com, > DNS:demo.webeloping.com, > DNS:imap.webeloping.com, > DNS:mail.webeloping.com, > DNS:smtp.webeloping.com, >

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-26 Thread Pau Peris
Hi Viktor, thanks a lot for your time. Here's the information you requested me to post: Common Name (CN) we.webeloping.es X509v3 Subject Alternative Name: DNS:we.webeloping.es, DNS:webeloping.es, DNS: imap.webeloping.es, DNS:smtp.webeloping.es, DNS:mail.webeloping.es, DNS: demo.w

Re: StartSSL.com SSL Class2 Certificate and Postfix

2014-03-22 Thread Viktor Dukhovni
On Sat, Mar 22, 2014 at 12:17:28PM +0100, Pau Peris wrote: > Currently my `Postfix 2.11` instance runs TLS on a `GoDaddy SSL > Certificate` The vendor is largely irrelevant. Can you be specific about the content of the certificate? - What is its subject commonName? - What are the DNS su