Page 1 of 1

TLS Negotiation failed, the certificate doesn't match the host.

Posted: Fri Apr 10, 2020 10:40 am
by ncc1701e
Hi,

From 2 days ago, suddenly I'm starting to get this on outgoing mail:

TLS Negotiation failed, the certificate doesn't match the host.

If i try to change password and connect again the outgoing SMTP server to vestacp server it says invalid credentials. If I connect to insecure connection, it works though.

Any ideas?

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Mon Apr 13, 2020 3:25 pm
by tolik109
I have the same problem! (

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Wed Apr 15, 2020 5:29 am
by cbsoftware
I've found the solution (workaround) for this. The solution is to append the .ca file details in to the .crt file. The solution is described here, http://css.lk/blog/8/gmail-send-mail-as ... ed-on-exim

Wish Exim team will introduce a parameter to point out the CA certificate details, soon.

Hope this helps.

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Sat Apr 25, 2020 7:37 pm
by orgolan
cbsoftware wrote:
Wed Apr 15, 2020 5:29 am
I've found the solution (workaround) for this. The solution is to append the .ca file details in to the .crt file. The solution is described here, http://css.lk/blog/8/gmail-send-mail-as ... ed-on-exim

Wish Exim team will introduce a parameter to point out the CA certificate details, soon.

Hope this helps.
hi, is this solution fit to a server with multiple domains?
can you show printscreens of how you implemented this solution?

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Fri May 08, 2020 1:47 am
by fredfontes
I'm having this trouble right now...

For band-aid fix I'm using my panel domain as mail server.

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Sat May 09, 2020 11:28 am
by orgolan
fredfontes wrote:
Fri May 08, 2020 1:47 am
I'm having this trouble right now...

For band-aid fix I'm using my panel domain as mail server.
can you explain your solution?

Re: TLS Negotiation failed, the certificate doesn't match the host.

Posted: Tue May 12, 2020 1:48 pm
by fredfontes
orgolan wrote:
Sat May 09, 2020 11:28 am
fredfontes wrote:
Fri May 08, 2020 1:47 am
I'm having this trouble right now...

For band-aid fix I'm using my panel domain as mail server.
can you explain your solution?
My vestacp uses domain.ext, for example.
My clients domains are: client1.ext, client2.ext...

Client One <[email protected]>
E-mail sent by: domain.ext