Re: [courier-users] submission problems

[Alexey I. <lef...@ma...>]

Did you set:
 
TLS_TRUSTCERTS=/path/ TLS_DHPARAMS=/path/ssl-dhparams.pem
TLS_CERTFILE=/path/domain.cert.pem
TLS_PRIVATE_KEYFILE=/path/private.key.pem
COURIERTLS=/usr/bin/couriertls
 
TLS_CIPHER_LIST="TLSv1:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA512:TLS-AES-256-GCM-SHA384:TLS-CHACHA20-POLY1305-SHA256"
 
TLS_PROTOCOL=TLSv1.2
TLS_STARTTLS_PROTOCOL=TLSv1.2
TLS_VERIFYPEER=NONE
 
Does your certificate works with anything else? like webserver?
 
Are you sure you can use «-host 127.0.0.1» ?
How that is related to your REAL IP?
 
This: openssl s_client -host 127.0.0.1 -port 465 -showcerts </dev/null
doesn’t work in my case AT ALL.
 
Check this out. Your mta is not yet configured according to web site below:
https://dmarcly.com/tools/mta-tls-checker
 
 
I can confirm the very latest courier works.
  
>Thursday, January 5, 2023 10:37 PM +02:00 from co...@ec...:
> 
>Hi,
>
>I updated my courier-mta server from version 1.1.8 to 1.1.10.
>
>It starts up without problems, imap over ssl also works (port 993).
>But when I try to use smtp over ssl (port 465), it does not work anymore as before.
>It fails to establish an encrypted connection:
> 
--
Alex