Hi, currently the server can use the SSL cert to secure conections for dovecot or postfix, but having several domains I receive complains from users that Outlook or any email client alerts that the conection may be insecure because the cert of the server doesn’t match the domain of the email, are any way to solve this? Thanks in advance.
My understanding is thats because your clients are using “shared” hosting (ie all virtual server/domains on your system are sharing one ip address…the one your server uses).
Postfix cannot handle multiple ssl certificates on a single ip address, so all of the users domain email accounts are trying to use the ssl that belongs to your webserver/mail server itself.
i think this means they need to alter their dns records and also email client app setup to avoid this.
In my setup i use the following for client dns and apps
clientdomain.com A record
Client email Apps (lets say my host.fqdn is web1.adamshosting.com)
or just plain “SSL”
I think if you are still getting warnings, perhaps clients need to purchase their own ipaddresses for virtual server then they can copy their Letsencrypt SSL certs to Postfix.
BTW, i have found that one should not try to copy every virtual servers SSL cert to Postfix. For me, doing this overwrites my servers own SSL for Postfix (at least thats what i think it does). then clients email starts trying to use which ever SSL cert was most recently copied to Postfix. The dns mx records are now all over the place because client dns mx records are pointing at your server itself, but your email SMTP server (Postfix) is returning postfix SSL certificates for the wrong domain and not your host system that Postfix runs on (the one you most recently copied from a new clients virtual server).
I believe that you should only copy 1 certificate to Postfix…your webmin one for the server itself, unless you have multiple ippaddresses on your system (perhaps someone else can clarify this)