one ssl cert for multiple virtual server for smtps ?

In postfix configuration it likely only accept one cert for a mail server however a actual server may installed multiple virtual server.

How do handle each virtual server smtps ?


There isn’t a way to handle that, unfortunately… it’s only possible to add one SSL cert into Postfix.

Most folks add the SSL cert for the primary domain of the server – usually the domain in the hostname – into Postfix.

Apache supports having multiple SSL certificates, but that’s not supported on other services.


I found that if the FQN of cert created is different from email sending domain, TLS enryption will failed
this is a local testing box

Anonymous TLS connection established from unknown[]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Aug 6 14:58:08 host1 postfix/smtpd[6150]: warning: TLS library problem: 6150:error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:s3_pkt.c:1086:SSL alert number 48: Aug 6 14:58:08 host1 postfix/smtpd[6150]: lost connection after STARTTLS from unknown[] Aug 6 14:58:08 host1 postfix/smtpd[6150]: disconnect from unknown[]

I used to create a cert for postfix
Then another virtual server name, would not able to send in a result of the maillog error message