/etc/postfix/ for iRedMail Certificates

  1. First Problem: /etc/postfix/ for iRedMail

I got free SSL certificate from StartSSL
Certificate ca.pem private.key ssl.crt are in cd /etc/apache2/ssl and they work fine when accessing Apachee server from the web.

Line below were added to /etc/apache2/sites-enabled/000-default

SSLEngine on                                                                
SSLProtocol all -SSLv2                                                      
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM                
SSLCertificateFile /etc/apache2/ssl/ssl.crt                           
SSLCertificateKeyFile /etc/apache2/ssl/private.key                        
SSLCertificateChainFile /etc/apache2/ssl/

As you can see etc/apache2/sites-enabled/000-default is lookin in ther correct spot for my StartSSL files so everthing is good,

But I am having problems with certs in my email clients when accessing the mail server on the same droplet. Suposidly iRedMail sets itself up to use it own certificate and thus this is in

# TLS parameters
smtpd_tls_cert_file = /etc/ssl/certs/iRedMail_CA.pem
smtpd_tls_key_file = /etc/ssl/private/iRedMail.key

The big question? I asume I want it to use my certificates from StartSSL instead. Can I just change the above two lines to /etc/apache2/ssl/* ?

smtpd_tls_cert_file = /etc/apache2/ssl/
smtpd_tls_key_file = SSLCertificateKeyFile /etc/apache2/ssl/private.key

And also do I have to have to add a line to point to /etc/apache2/ssl/ssl.crt?

  1. Second Problem: From file:
# information on enabling SSL in the smtp client.
myhostname =
alias_maps = hash:/etc/postfix/aliases
alias_database = hash:/etc/postfix/aliases
myorigin =
mydestination = $myhostname, localhost, localhost.localdomain, localhost.$myhostname
relayhost =

Commands: hostname cat hosts localhost localhost.localdomain
#      localhst mydomain

Should I change in the line:

myhostname = to  myhostname =

Or since is in /etc/hosts will it still work fine?

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

You will need to combine /etc/apache2/ssl/ssl.crt and /etc/apache2/ssl/ and then configure iRedMail to use the resulting file as the certificate:

cat /etc/apache2/ssl/ssl.crt /etc/apache2/ssl/ > /etc/apache2/ssl/combined.crt

Then, set the following configuration options:

smtpd_tls_cert_file = /etc/apache2/ssl/combined.crt
smtpd_tls_key_file = /etc/apache2/ssl/private.key

I would change the droplet’s hostname to instead:

echo | sudo tee /etc/hostname | sudo tee /etc/mailname

and then reboot:

sudo reboot