Heiko Schlittermann wrote >> systemctl restart dovecot >Why dovecot?
I don't remember why, it was a while ago. Maybe unnecessary. I did know that exim4 re-reads the file and a restart wasn't needed for it. The modulos match as root. But I realised it was important to do it as Debian-exim. I don't have sudo installed but used su -s /bin/bash Debian-exim. (Thanks for listing the exact commands BTW). And the error was fairly obvious. I couldn't read the cert file or the symlink to it. /etc/letsencrypt and its subdirectories live and archive were group executable (750), but the group was root. Changing the group to Debian-exim fixed the problem. The private keys are still (700 root:root) so I trust this hasn't reduced security. Thanks Heiko! Adrian -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
