Pupeno writes:

On Tuesday, 9 de May de 2006 10:48, Sam Varshavchik wrote:
Pupeno writes:
> On Tuesday, 9 de May de 2006 09:13, Georg Lutz wrote:
>> I would say no. You can setup different courer servers with different
>> ssl keys.
>>
>> But what do you mean by "multi-host" ?
>
> I am hosting various domains (pupeno.com, sandrafernandez.eu, etc). I
> want each of them to work in its own IP and with its own key (since
> clients would be connecting to mail.pupeno.com, mail.sandrafernandez.eu,
> etc). Currently I have one key for all of them but I get security
> warnings about the domain not matching for every domain but one.

Install each certificate file as $CERTFILE.aaa.bbb.ccc.ddd

What about IPv6 ?

$CERTFILE.a:b:c::d:e

or something like that. Do some experimentation and see how the IP address gets logged in syslog, when you connect, and use the exact same format.


Checking my configuration files I see statments such as:

TLS_CERTFILE=/etc/courier/esmtpd.pem

how should I modify those if I have 5 IPs, 5 domains and 5 certificates ?

Don't modify anything. Install the correct certfile for the correct IP address.


Attachment: pgpu7iYbXSJOJ.pgp
Description: PGP signature

Reply via email to