My YunoHost server
Hardware: VPS bought online
YunoHost version: 11.0.9.14
I have access to my server : Through SSH | through the webadmin |
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
If yes, please explain:
Description of the problem
Hello everyone,
I have a problem with the certificate of my SMTP server.
Context:
One server Yunohost SMTP server and another server with discourse to install.
Hence the line in the logs about the DNS non-compliance.
Type : TXT
Name : @ @
The current value is : "v=spf1 mx -all"
The expected value is: "v=spf1 a mx -all"
Since two three days I have an error sending mail from the discourse
ERROR - SSL_connect returned=1 errno=0 peeraddr=ip.du.serveur.yunohst:587 state=error: certificate verify failed (certificate has expired)
So first of all, I see that it is not normal that it looks for a certificate on an IP but I don’t understand why.
Then this error also appeared in my mail manager via an alert saying that the certificate is invalid.
Here is the result of the command:
openssl s_client -connect ndd.fr:587
CONNECTED(00000003)
4037DA36367F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:354:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 309 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
Actions taken
- Regenerate the SSL certificate for the concerned domain (main)
Thanks in advance for your help.
Translated with DeepL Translate: The world's most accurate translator (free version)
Modèle de message (français)
Mon serveur YunoHost
Matériel: VPS acheté en ligne
Version de YunoHost: 11.0.9.14
J’ai accès à mon serveur : En SSH | Par la webadmin
Êtes-vous dans un contexte particulier ou avez-vous effectué des modificiations particulières sur votre instance ? : non
Si oui, expliquer:
Description du problème
Bonjour a tous,
J’ai un probleme avec le certificat de mon serveur SMTP.
Context :
Uns serveur Yunohost serveur de serveur SMTP et un autre serveur avec discourse d’installer.
D’ou la la ligne dans les logs sur la non comformité DNS.
Type : TXT
Nom : @
La valeur actuelle est : "v=spf1 mx -all"
La valeur attendue est : "v=spf1 a mx -all"
Depuis deux trois jours j’ai une erreur d’envoi de mail depuis le discourse
ERREUR - SSL_connect returned=1 errno=0 peeraddr=ip.du.serveur.yunohst:587 state=error: certificate verify failed (certificate has expired)
Donc déja, je constate que ce n’est pas normal qu’il cherche un certificat sur une IP mais je ne comprend pa pourquoi.
Ensuite cette erreur s’est aussi manifesté dans mon gestionnaire de mail via une alerte disant que le certificat est invalide.
Voici le resultat de la commande :
openssl s_client -connect ndd.fr:587
CONNECTED(00000003)
4037DA36367F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:354:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 309 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
Actions effectuée
- Regenerer le certificat SSL pour le domaine concerné (principal)
Merci d’avance pour votre aide.
