Mail server name for SSL wrong?

LeonardChallis

• September 09, 2016 05:09

From other posts on this forum I found that the SSL server settings are derived from the SSL certificates set for different services. I have a wildcard certificate. Here's some output: [root@myhost ~]# find /var/cpanel/ssl -name "*-CN" -exec grep -H '' '{}' \; | sort /var/cpanel/ssl/cpanel-CN:*.example.com /var/cpanel/ssl/dovecot-CN:*.example.com /var/cpanel/ssl/exim-CN:*.example.com /var/cpanel/ssl/ftp-CN:*.example.com This shows the *.mysite.com wildcard SSL certificate. However, in the SSL mail settings the mail servers is: myhost.example.com Is this the correct functionality? And if not, how can I remedy it? I want it to just be www.example.com if possible. Thanks

• 

  cPanelMichael

  • September 22, 2016 14:27

  However, in the SSL mail settings the mail servers is: myhost.example.com Is this the correct functionality? And if not, how can I remedy it? I want it to just be www.example.com if possible.

  
  Internal case CPANEL-8212 (included with cPanel version 60) addresses some issues with this functionality. Here's some information about the changes stemming from this case:
  - Exim was not checking wildcard matches against Domain TLS; this change introduces logic that corrects that. - Mail SNI only worked for the Apache vhost"s ServerName. It now works for all domains on the vhost. - Makes Dovecot use the Domain TLS repository for keys/certificates. It will thus be consistent with Exim, cpsrvd, and cpdavd. - Makes Dovecot always use SNI. - Updates Cpanel::SSL::Domain so that requests for the "optimal" host for a TLS connection will be informed by knowledge of Domain TLS.
  Is the website you referenced using it's own SSL certificate? If so, the SNI functionality with Dovecot should automatically detect the correct certificate in cPanel version 60. Thank you

  0

Please sign in to leave a comment.