Email problem

[popeye]

Hi can anyone help i keep getting this message below and customers do when they setup email on computers or phones, i do have ssl installed on the host name so not sure why i get this error ?

The server you are connected to is using a security certificate that could not be verified. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider


The ssl is installed on the host name and works great with whm and cpanel, but when i install the same one on Dovecot Mail Server it says issuer is my host name not rapid ssl ?

 

[robb3369]

When you examine your SSL certificate of working cpanel ssl certificate (via Manage Service SSL Certificates), select install new certificate, enter "Domain this CRT" and click fetch...

Copy each of the fields to text editor:
1: Certificate (.crt)
2: Private key (.key)
3: The CA bundle

(If you don't have a CA bundle, check your cpanel install via SSL Checker - SSL Certificate Verify (use server.domain.com:2096 as hostname to test and make sure you have no chain errors)

Now, go back (DO NOT make any changes!!!) and go back into Manage Service SSL Certificates), select install new certificate for the Dovecot Mail Server and paste the 3 items your copied above...

See if that works for you... Since we use a wildcard SSL, it gets a little more interesting...

 

[popeye]

Hi i have an ssl installed on cPanel/WHM/Webmail Service which works fine and says issuer RapidSSL CA but it does not show in Dovecot Mail Server says issuer and got my host name in there ?

I went to SSL Checker and got all green ticks.

Tried what you said copied and pasted them all in and still the same?

 

[cPanelMichael]

Hello

Are the customers using the hostname of the server for the mail server name in their email client, or are they using their specific domain name?

Thank you.

 

[popeye]

Hi customers are using their own domain like this mail.domain.com

 

[quietFinn]

Hi customers are using their own domain like this mail.domain.com

If they use secure connection they must use the hostname of the server for the mail server name.

 

[popeye]

Yes we tried the server name but still get dovecot: (auth failed

 

[quietFinn]

Yes we tried the server name but still get dovecot: (auth failed

In your 1st post in this thread you told they get a certificate error, an authentication error is totally different thing and has nothing to do with the certificate.

 

[popeye]

Hi yes customers get both messages

 

[cPanelMichael]

You will need to ensure the customers configure their email clients to use the SSL certificate name that is used for the mail server in:

"WHM Home » Service Configuration » Manage Service SSL Certificates"

An authentication error is likely not related to any SSL warnings. Have you checked to ensure their email address/password are valid, and work with a Webmail application?

Thank you.

 

[popeye]

Hi i have an ssl installed on the host name but when i try to install it on Dovecot Mail Server it says issuer is my host name not rapid ssl ?

 

[cPanelMichael]

Hi i have an ssl installed on the host name but when i try to install it on Dovecot Mail Server it says issuer is my host name not rapid ssl ?

Could you paste the exact message that appears?

Thank you.

 

[popeye]

Don't get any error just when i check it says issuer is my host name not rapid ssl and Self Signed yes ?

 

[cPanelMichael]

Don't get any error just when i check it says issuer is my host name not rapid ssl and Self Signed yes ?

Are you sure that you installed the correct CRT and CABundle that your SSL issuer provided? Feel free to open a support ticket so we can access your server directly and investigate further:

Submit A Ticket

You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[popeye]

Yes i am sure because on whm / cpanel it says rapis ssl and and when i go to WHM / cPanel /web mail they are all secure.

 

[cPanelMichael]

Could you open a support ticket so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.