vesta icon indicating copy to clipboard operation
vesta copied to clipboard

Wrong TLS Cert Listed for Mail Server

Open mikeV02 opened this issue 4 years ago • 0 comments

Describe the problem:

When verifying the TLS cert being used for Mail Server, it lists the one used for the myVesta Panel and not the one configured for the mail server. Issue is seen only on the shown cert, the actual certificate being used is the selected one.

myVesta Cert

Incorrect Mail Server Cert

Checking mail server uses correct cert

Steps to Reproduce:

  1. Go to server edit $domain/edit/server/ and set a TLS cert for the myVesta Panel. It could one one from the registered domains or manually entered.
  2. Save configuration
  3. Enter edit the Mail server cert and chose a TLS from a different registered domain (it does not allow to enter manually).
  4. Save configuration.
  5. See incorrect details listed for Mail Server TLS cert (it shows the one from myVesta panel and not the one for Mail Server)

I can verify the correct cert is being used for the mail server event when the page lists the incorrect one issuing a curl command to my mail server domain: curl -vL https://$maildomain:465

Debian version:

Debian 10

VestaCP Version:

0.9.8-26-34

Installed Software (what you got with the installer):

WEB_SYSTEM='apache2' WEB_RGROUPS='www-data' WEB_PORT='8080' WEB_SSL_PORT='8443' WEB_SSL='mod_ssl' PROXY_SYSTEM='nginx' PROXY_PORT='80' PROXY_SSL_PORT='443' STATS_SYSTEM='webalizer,awstats' FTP_SYSTEM='proftpd' DNS_SYSTEM='bind9' MAIL_SYSTEM='exim4' ANTIVIRUS_SYSTEM='clamav-daemon' ANTISPAM_SYSTEM='spamassassin' IMAP_SYSTEM='dovecot' CRON_SYSTEM='cron' FIREWALL_SYSTEM='iptables' FIREWALL_EXTENSION='fail2ban' BACKUP_SYSTEM='local' LANGUAGE='en' VERSION='0.9.8'

mikeV02 avatar Aug 27 '20 01:08 mikeV02