Giters

mail-in-a-box / mailinabox

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.

Home Page:https://mailinabox.email/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Certificates for domains with uppercase letters does not work.

DukeBlackadder opened this issue · comments

commented

The request with Letsencrypt works fine, but when using a domain with one or more uppercase letters MAIB fails to create the correct symlink (/home/user-data/ssl/ssl_certificate.pem) and when the symlink is fixed manually, then MIAB reports:
Certificate has a problem: The certificate is for the wrong domain name. It is for -domainname with only lowercase letters-.

Letsencrypt only creates certificates with lower case.

commented

Domains are case insensitive - https://www.ietf.org/rfc/rfc4343.txt

But LE only provides support for lowercase - https://community.letsencrypt.org/t/uppercase-invalid-error/113396

You can fix this by using lowercase domains in your configuration - including a lowercase hostname.

I figure MIAB should have some way to stop you using capitalisation because of the LE rule, I couldn't find any checks for this and haven't tried capitals myself.