multi-domain - multiple SSL certificates

[Sruli Saurymper]

On 03/02/15 18:00, Toke Høiland-Jørgensen wrote:
> Axel <ar at xlrs.de> writes:
>
>> i don't know exactly, but you can configure postfix to listen on multiple ip-
>> adresses or ports. perhaps it's usable with a configuration like this
>> http://blog.wpkg.org/2013/07/31/postfix-and-multiple-ssl-certificates/
>>
>> And I don't know how to use certificates with multiple domains on a single IP
>> with an IMAP server...
> I have a multi-domain setup for kolab with several SSL certificates
> using the method in the link above for postfix, and using SNI on the web
> server.
You have that on a single IP?
>
> For cyrus-imap, what you do is edit /etc/cyrus.conf. It will have lines
> like this in the SERVICES section:
>
>      imaps               cmd="imapd -s" prefork=5
>
> What you do is simply duplicate these lines and add a listen= parameter.
> I have this:
>
>      imaps               cmd="imapd -s" listen="hostx.example.org:imaps" prefork=5
>      imapslocal          cmd="imapd -s" listen="localhost:imaps" prefork=5
>      imapshosty          cmd="imapd -s -C /etc/imapd.hosty.conf" listen="hosty.example.com:imaps" prefork=5
>
>
> The file /etc/imapd.hosty.conf is just a copy of /etc/imapd.conf where
> the tls_* keys are exchanged to point to the other certificate.
>
> You can do the same sort of duplication for the sieve server if you
> support that...
>
> -Toke
> _______________________________________________
> users mailing list
> users at lists.kolab.org
> https://lists.kolab.org/mailman/listinfo/users