From 779ee5a3acf2b8ff06a52505f27a1fc693e36a96 Mon Sep 17 00:00:00 2001 From: Gorden Mende Date: Wed, 22 Mar 2023 09:22:10 +0100 Subject: [PATCH] changed mail.solusar.de cert --- .etckeeper | 12 +++ dovecot/dovecot.conf | 4 +- .../archive/mail.solusar.de-0001/cert1.pem | 34 +++++++ .../archive/mail.solusar.de-0001/chain1.pem | 61 ++++++++++++ .../mail.solusar.de-0001/fullchain1.pem | 95 +++++++++++++++++++ .../archive/mail.solusar.de-0001/privkey1.pem | 28 ++++++ letsencrypt/csr/0586_csr-certbot.pem | 20 ++++ letsencrypt/csr/0587_csr-certbot.pem | 20 ++++ letsencrypt/keys/0586_key-certbot.pem | 28 ++++++ letsencrypt/keys/0587_key-certbot.pem | 28 ++++++ letsencrypt/live/mail.solusar.de-0001/README | 14 +++ .../live/mail.solusar.de-0001/cert.pem | 1 + .../live/mail.solusar.de-0001/chain.pem | 1 + .../live/mail.solusar.de-0001/fullchain.pem | 1 + .../live/mail.solusar.de-0001/privkey.pem | 1 + letsencrypt/renewal/mail.solusar.de-0001.conf | 13 +++ postfix/main.cf | 4 +- 17 files changed, 361 insertions(+), 4 deletions(-) create mode 100644 letsencrypt/archive/mail.solusar.de-0001/cert1.pem create mode 100644 letsencrypt/archive/mail.solusar.de-0001/chain1.pem create mode 100644 letsencrypt/archive/mail.solusar.de-0001/fullchain1.pem create mode 100644 letsencrypt/archive/mail.solusar.de-0001/privkey1.pem create mode 100644 letsencrypt/csr/0586_csr-certbot.pem create mode 100644 letsencrypt/csr/0587_csr-certbot.pem create mode 100644 letsencrypt/keys/0586_key-certbot.pem create mode 100644 letsencrypt/keys/0587_key-certbot.pem create mode 100644 letsencrypt/live/mail.solusar.de-0001/README create mode 120000 letsencrypt/live/mail.solusar.de-0001/cert.pem create mode 120000 letsencrypt/live/mail.solusar.de-0001/chain.pem create mode 120000 letsencrypt/live/mail.solusar.de-0001/fullchain.pem create mode 120000 letsencrypt/live/mail.solusar.de-0001/privkey.pem create mode 100644 letsencrypt/renewal/mail.solusar.de-0001.conf diff --git a/.etckeeper b/.etckeeper index 8f8d411c..ca9a3a45 100755 --- a/.etckeeper +++ b/.etckeeper @@ -1194,6 +1194,11 @@ maybe chmod 0644 'letsencrypt/archive/indra.solusar.de/privkey7.pem' maybe chmod 0644 'letsencrypt/archive/indra.solusar.de/privkey8.pem' maybe chmod 0644 'letsencrypt/archive/indra.solusar.de/privkey9.pem' maybe chmod 0755 'letsencrypt/archive/mail.solusar.de' +maybe chmod 0755 'letsencrypt/archive/mail.solusar.de-0001' +maybe chmod 0644 'letsencrypt/archive/mail.solusar.de-0001/cert1.pem' +maybe chmod 0644 'letsencrypt/archive/mail.solusar.de-0001/chain1.pem' +maybe chmod 0644 'letsencrypt/archive/mail.solusar.de-0001/fullchain1.pem' +maybe chmod 0600 'letsencrypt/archive/mail.solusar.de-0001/privkey1.pem' maybe chmod 0644 'letsencrypt/archive/mail.solusar.de/cert1.pem' maybe chmod 0644 'letsencrypt/archive/mail.solusar.de/cert10.pem' maybe chmod 0644 'letsencrypt/archive/mail.solusar.de/cert11.pem' @@ -2455,6 +2460,8 @@ maybe chmod 0644 'letsencrypt/csr/0582_csr-certbot.pem' maybe chmod 0644 'letsencrypt/csr/0583_csr-certbot.pem' maybe chmod 0644 'letsencrypt/csr/0584_csr-certbot.pem' maybe chmod 0644 'letsencrypt/csr/0585_csr-certbot.pem' +maybe chmod 0644 'letsencrypt/csr/0586_csr-certbot.pem' +maybe chmod 0644 'letsencrypt/csr/0587_csr-certbot.pem' maybe chmod 0755 'letsencrypt/keys' maybe chmod 0644 'letsencrypt/keys/0000_key-certbot.pem' maybe chmod 0644 'letsencrypt/keys/0001_key-certbot.pem' @@ -3042,10 +3049,14 @@ maybe chmod 0600 'letsencrypt/keys/0582_key-certbot.pem' maybe chmod 0600 'letsencrypt/keys/0583_key-certbot.pem' maybe chmod 0600 'letsencrypt/keys/0584_key-certbot.pem' maybe chmod 0600 'letsencrypt/keys/0585_key-certbot.pem' +maybe chmod 0600 'letsencrypt/keys/0586_key-certbot.pem' +maybe chmod 0600 'letsencrypt/keys/0587_key-certbot.pem' maybe chmod 0755 'letsencrypt/live' maybe chmod 0644 'letsencrypt/live/README' maybe chmod 0755 'letsencrypt/live/indra.solusar.de' maybe chmod 0755 'letsencrypt/live/mail.solusar.de' +maybe chmod 0755 'letsencrypt/live/mail.solusar.de-0001' +maybe chmod 0644 'letsencrypt/live/mail.solusar.de-0001/README' maybe chmod 0755 'letsencrypt/live/nc.solusar.de' maybe chmod 0644 'letsencrypt/live/nc.solusar.de/README' maybe chmod 0755 'letsencrypt/live/postfix.solusar.de' @@ -3065,6 +3076,7 @@ maybe chmod 0755 'letsencrypt/renewal-hooks/post/nginx.sh' maybe chmod 0755 'letsencrypt/renewal-hooks/pre' maybe chmod 0755 'letsencrypt/renewal-hooks/pre/nginx.sh' maybe chmod 0644 'letsencrypt/renewal/indra.solusar.de.conf' +maybe chmod 0644 'letsencrypt/renewal/mail.solusar.de-0001.conf' maybe chmod 0644 'letsencrypt/renewal/mail.solusar.de.conf' maybe chmod 0644 'letsencrypt/renewal/nc.solusar.de.conf' maybe chmod 0644 'letsencrypt/renewal/postfix.solusar.de.conf' diff --git a/dovecot/dovecot.conf b/dovecot/dovecot.conf index 966b8a36..e617c46c 100644 --- a/dovecot/dovecot.conf +++ b/dovecot/dovecot.conf @@ -11,8 +11,8 @@ protocols = imap lmtp sieve ####################### ssl = required -ssl_cert = =1.3.7. +`cert.pem` : will break many server configurations, and should not be used + without reading further documentation (see link below). + +WARNING: DO NOT MOVE OR RENAME THESE FILES! + Certbot expects these files to remain in this location in order + to function properly! + +We recommend not moving these files. For more information, see the Certbot +User Guide at https://certbot.eff.org/docs/using.html#where-are-my-certificates. diff --git a/letsencrypt/live/mail.solusar.de-0001/cert.pem b/letsencrypt/live/mail.solusar.de-0001/cert.pem new file mode 120000 index 00000000..634cbbc1 --- /dev/null +++ b/letsencrypt/live/mail.solusar.de-0001/cert.pem @@ -0,0 +1 @@ +../../archive/mail.solusar.de-0001/cert1.pem \ No newline at end of file diff --git a/letsencrypt/live/mail.solusar.de-0001/chain.pem b/letsencrypt/live/mail.solusar.de-0001/chain.pem new file mode 120000 index 00000000..28a897eb --- /dev/null +++ b/letsencrypt/live/mail.solusar.de-0001/chain.pem @@ -0,0 +1 @@ +../../archive/mail.solusar.de-0001/chain1.pem \ No newline at end of file diff --git a/letsencrypt/live/mail.solusar.de-0001/fullchain.pem b/letsencrypt/live/mail.solusar.de-0001/fullchain.pem new file mode 120000 index 00000000..f3b3f19d --- /dev/null +++ b/letsencrypt/live/mail.solusar.de-0001/fullchain.pem @@ -0,0 +1 @@ +../../archive/mail.solusar.de-0001/fullchain1.pem \ No newline at end of file diff --git a/letsencrypt/live/mail.solusar.de-0001/privkey.pem b/letsencrypt/live/mail.solusar.de-0001/privkey.pem new file mode 120000 index 00000000..9cbb41a4 --- /dev/null +++ b/letsencrypt/live/mail.solusar.de-0001/privkey.pem @@ -0,0 +1 @@ +../../archive/mail.solusar.de-0001/privkey1.pem \ No newline at end of file diff --git a/letsencrypt/renewal/mail.solusar.de-0001.conf b/letsencrypt/renewal/mail.solusar.de-0001.conf new file mode 100644 index 00000000..bbc249ff --- /dev/null +++ b/letsencrypt/renewal/mail.solusar.de-0001.conf @@ -0,0 +1,13 @@ +# renew_before_expiry = 30 days +version = 1.19.0 +archive_dir = /etc/letsencrypt/archive/mail.solusar.de-0001 +cert = /etc/letsencrypt/live/mail.solusar.de-0001/cert.pem +privkey = /etc/letsencrypt/live/mail.solusar.de-0001/privkey.pem +chain = /etc/letsencrypt/live/mail.solusar.de-0001/chain.pem +fullchain = /etc/letsencrypt/live/mail.solusar.de-0001/fullchain.pem + +# Options used in the renewal process +[renewalparams] +account = 8b7806ff874ad192eb557b295a53e1f8 +authenticator = standalone +server = https://acme-v02.api.letsencrypt.org/directory diff --git a/postfix/main.cf b/postfix/main.cf index f4e54b85..20f4390e 100644 --- a/postfix/main.cf +++ b/postfix/main.cf @@ -59,8 +59,8 @@ smtpd_tls_dh1024_param_file = /etc/myssl/dh4096.pem smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_loglevel = 1 -smtpd_tls_cert_file=/etc/letsencrypt/live/mail.solusar.de/fullchain.pem -smtpd_tls_key_file=/etc/letsencrypt/live/mail.solusar.de/privkey.pem +smtpd_tls_cert_file=/etc/letsencrypt/live/mail.solusar.de-0001/fullchain.pem +smtpd_tls_key_file=/etc/letsencrypt/live/mail.solusar.de-0001/privkey.pem ##