Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
and the results seem to confirm that, but there is one warning message that says: "Cert Hostname DOES NOT VERIFY (mx.myserver.mydomain.de != myserver.mydomain.de) So email is encrypted but the host is not verified" Is CheckTLS.com just insisting that the CN of the certificate shou

Re: Cert hostname does not verify...

2016-01-09 Thread Wietse Venema
N string to the servers DNS hostname" > ... > > I went to checktls.com and asked it to verify the tls communication for > e.g den...@epicmail.mydomain.de. > TLS works fine and the results seem to confirm that, but there is one > warning message that says: > > "Cert Hos

Re: Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
to checktls.com and asked it to verify the tls communication for e.g den...@epicmail.mydomain.de. TLS works fine and the results seem to confirm that, but there is one warning message that says: "Cert Hostname DOES NOT VERIFY (mx.myserver.mydomain.de != myserver.mydomain.de) So email is encr

Re: Cert hostname does not verify...

2016-01-09 Thread Viktor Dukhovni
On Sat, Jan 09, 2016 at 10:56:40AM -0500, Wietse Venema wrote: > > Is CheckTLS.com just insisting that the CN of the certificate should > > match the mx record of the mail domain in question or is this genereally > > expected? > > Regardless of what CheckTLS.com says, what is the server name in

Re: Cert hostname does not verify...

2016-01-09 Thread Dennis Steinkamp
Thanks viktor for providing more information. Am 09.01.2016 um 19:14 schrieb Viktor Dukhovni: On Sat, Jan 09, 2016 at 10:56:40AM -0500, Wietse Venema wrote: Is CheckTLS.com just insisting that the CN of the certificate should match the mx record of the mail domain in question or is this genere