Remove DST Root CA X3 from postfix

Discussion in 'Installation/Configuration' started by Zague, Oct 1, 2021.

  1. Zague

    Zague Member

    Hello Guys,
    I have an issue with postfix and DST Root CA X3, the connection to smtp server has failed because it says that cert has expired.
    When I run the command "openssl s_client -starttls smtp -crlf -connect mail.smtp.net:587|openssl x509 -noout -dates" I got:
    How can I remove the expired certificate in order to continue sending emails?
    Thank you for your time!!
    Zague
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Make sure your openssl and mail client are up to date, so they contain the new root certificate.
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

  4. atle

    atle Member HowtoForge Supporter

    Here is a YouTube from lets encrypt that describes what happens when the DST X3 cert expires and what mitigations that can be done, amongst others the one given in till's reference (at 17:23).
     
    Jesse Norell likes this.
  5. Zague

    Zague Member

    Thank you for all your answers, my issue was fixed updating to last version of openssl.
    Regars
     

Share This Page