I am getting error for other domains then the server domain stream_socket_enable_crypto () peer certificate cn did not match expected domain. How I can overcome this.
The SSL cert of the mail system contains the server hostname only. Use the server hostname to connect to the mail system and not other domains.
Hi Till, so you mean if the domain is nexgensbp.com, I will not use host as mail.nexgensbp.com but mail.mywebsolutions.co.in. if yes, is there no way I can use nexgensbp.com as while providing the mail details to the customer, it will look bit odd.
It is common that clients use the mail server name of the provider. If you would want your users to be able to use their own domain names, then you will have to create a ssl cert which contains all mail related subdomains of all clients in one ssl cert and then use that cert for the mail system. But you must be aware that Let's encrypt has a limit of 100 domains inside a single cert, so you can host max. 99 customers + your server hostname on that server then, before you reach the limit.
Hi Till, Thanks for the info. I think for not all clients I need to provide the mail host details, where I can use my server name, for the rest I would like to create and include single cert and add other domains as needed. is that possible, how I can achieve that?