Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable STARTTLS option - Intermediate Certificate missing #293

Open
andreafa opened this issue Sep 14, 2022 · 0 comments
Open

Enable STARTTLS option - Intermediate Certificate missing #293

andreafa opened this issue Sep 14, 2022 · 0 comments

Comments

@andreafa
Copy link

I've configured the environment variables:
INBUCKET_SMTP_TLSENABLED, INBUCKET_SMTP_TLSPRIVKEY, INBUCKET_SMTP_TLSCERT

After testing the receipt with https://www.checktls.com/TestReceiver, I got:
TLS OK - Cert FAIL

The connection log provided by checktls.com says:
Certificate #1 of 1 (sent by MX):
Cert VALIDATION ERROR(S): unable to get local issuer certificate
This may help: What Is An Intermediate Certificate
So email is encrypted but the recipient domain is not verified

The workaround is to add the intermediate certificate within the INBUCKET_SMTP_TLSCERT file
!! AFTER the domain cert, otherwise it does not work !!
result: TLS OK - Cert OK

Maybe you could add a new environment variable for the intermediate certificate,
something like: INBUCKET_SMTP_TLSCERTCHAIN

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants