Using LE-certs also for hMail?!?

MIB

Hello again...
is there a way to use the LE- certs that Abyss create also for hMail? Problem is that the name of the certs change while renew ...

devastator82

Hello.
there are a post to export certificates:
https://aprelium.com/forum/viewtopic.php?t=523379
i used this post to configure my mail server.

MIB

... ty a lot. I will give it a try and will report the result here ...

MIB

... nope, that doesn't work ...
If I go this way ...


hMail- Server -> SSL-Certs -> (any name) ...
  Certificate File = ...Abyss\kcstore\5e****a4.acme.crt
  Private Key File = ...Abyss\kcstore\5e****eb.key

... I can't connect to the MX anymore :(
I think that hMail need another type of Cert or any other is wrong with it. But at the moment I don't know to fix that ...
BTW:
The files I use are a real domain (Master) and also the MX running on this domain. I also use a global key file for all domains in Abyss so I only have one single key file. Every domain create an own acme.crt and I use definately the right one ...
EDIT say:
I have now create CertFiles at SSL4FREE and that works well. So it's what I have in mind before: The Fileformat or anything else with that out of Abyss don't work with hMailserver this way...

admin

M*I*B wrote
... nope, that doesn't work ...
If I go this way ...


hMail- Server -> SSL-Certs -> (any name) ...
  Certificate File = ...Abyss\kcstore\5e****a4.acme.crt
  Private Key File = ...Abyss\kcstore\5e****eb.key

The values for the parameters are not good at all. You are using the kcstore subdirectory which is "managed" by Abyss Web Server. This will cause a big mess in some situations.
Put there any other path on your hard drive in any directory (anything other than kcstore.)
Second seems to expect PEM certs and keys which are what Abyss Web Server outputs in these files. So there should be no problem.
Our recommendation is to not store the cert and key in kcstore but in another directory and correctly have hMailServer use these files. This should work fine.

MIB

... nope ...
the hMailServer don't touch the files; just read it.
I also have copy the two files in the hMail- folder and use it. That also don't work.
It makes no difference whether I integrate the two files directly from the kstore into hMail or their copies in the hMail directory.
With the files generated by ssl4free, however, it worked right away ... But that I have to repeat 4th a year... Not the problem to let generate this, but I have to enter the callange-code in every DNS- entry... that takes an hour every time with much possibility of errors...
That's why I'm try to use the files from Abyss resp. LE due automatic ...just for the reason of my actions...
So there must be a difference between both methodes / files ...

devastator82

M*I*B wrote
... nope ...
the hMailServer don't touch the files; just read it.
I also have copy the two files in the hMail- folder and use it. That also don't work.
It makes no difference whether I integrate the two files directly from the kstore into hMail or their copies in the hMail directory.
With the files generated by ssl4free, however, it worked right away ... But that I have to repeat 4th a year... Not the problem to let generate this, but I have to enter the callange-code in every DNS- entry... that takes an hour every time with much possibility of errors...
That's why I'm try to use the files from Abyss resp. LE due automatic ...just for the reason of my actions...
So there must be a difference between both methodes / files ...

I have done as Admin said, and works for me.
Edit:
I have deleted default crts to re-download, after i set new directory in abyss web server configuration.

MIB

... hmmmm ... Why do that work at your side and not at my side?
I will do later a screenShot to prevent misunderstandings between us due my bad english...

admin

M*I*B,
Please get in touch with us using our support email address for a faster exchange. Send us your abyss.conf file for review and let us know how hMailServer is configured and if it reports errors (or its log if any.)

MIB

... that I will do next. Take a little time to recreate the config I have try without result ...