{"action":"created","issue":{"url":"https://api.github.com/repos/tomav/docker-mailserver/issues/117","repository_url":"https://api.github.com/repos/tomav/docker-mailserver","labels_url":"https://api.github.com/repos/tomav/docker-mailserver/issues/117/labels{/name}","comments_url":"https://api.github.com/repos/tomav/docker-mailserver/issues/117/comments","events_url":"https://api.github.com/repos/tomav/docker-mailserver/issues/117/events","html_url":"https://github.com/tomav/docker-mailserver/issues/117","id":145472067,"number":117,"title":"LE SSL working with IMAP, but not SMTP","user":{"login":"mgansler","id":12011396,"avatar_url":"https://avatars.githubusercontent.com/u/12011396?v=3","gravatar_id":"","url":"https://api.github.com/users/mgansler","html_url":"https://github.com/mgansler","followers_url":"https://api.github.com/users/mgansler/followers","following_url":"https://api.github.com/users/mgansler/following{/other_user}","gists_url":"https://api.github.com/users/mgansler/gists{/gist_id}","starred_url":"https://api.github.com/users/mgansler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mgansler/subscriptions","organizations_url":"https://api.github.com/users/mgansler/orgs","repos_url":"https://api.github.com/users/mgansler/repos","events_url":"https://api.github.com/users/mgansler/events{/privacy}","received_events_url":"https://api.github.com/users/mgansler/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/tomav/docker-mailserver/labels/help%20wanted","name":"help wanted","color":"159818"},{"url":"https://api.github.com/repos/tomav/docker-mailserver/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":20,"created_at":"2016-04-03T08:56:01Z","updated_at":"2016-04-12T13:43:37Z","closed_at":null,"body":"I'm a bit confused right now, because the container is using the correct certificate for IMAP, but the self signed one for SMPT:\r\n\r\n```\r\n$ docker exec mail_mail_1 openssl s_client -connect 0.0.0.0:143 -starttls imap -CApath /etc/ssl/certs/\r\n---\r\nCertificate chain\r\n 0 s:/CN=mail.MYDOMAIN.de\r\n   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3\r\n   i:/O=Digital Signature Trust Co./CN=DST Root CA X3\r\n---\r\n```\r\n\r\n```\r\n$ docker exec mail_mail_1 openssl s_client -connect 0.0.0.0:25 -starttls smtp\r\n---\r\nCertificate chain\r\n 0 s:/CN=f5ee59d47428\r\n   i:/CN=f5ee59d47428\r\n---\r\n```\r\n\r\nMy docker-compose looks like this:\r\n```\r\nmail:\r\n  image: tvial/docker-mailserver\r\n  hostname: mail\r\n  domainname: MYDOMAIN.de\r\n  cap_add:\r\n    - NET_ADMIN\r\n  environment:\r\n    - DMS_SSL=letsencrypt\r\n  ports:\r\n  - \"25:25\"\r\n  - \"143:143\"\r\n  - \"587:587\"\r\n  - \"993:993\"\r\n  volumes:\r\n  - ./spamassassin:/tmp/spamassassin/\r\n  - ./postfix:/tmp/postfix/\r\n  - ./mail:/var/mail\r\n  - /etc/letsencrypt:/etc/letsencrypt\r\n```\r\n\r\nWhat did I miss?"},"comment":{"url":"https://api.github.com/repos/tomav/docker-mailserver/issues/comments/208912065","html_url":"https://github.com/tomav/docker-mailserver/issues/117#issuecomment-208912065","issue_url":"https://api.github.com/repos/tomav/docker-mailserver/issues/117","id":208912065,"user":{"login":"robertdolca","id":383543,"avatar_url":"https://avatars.githubusercontent.com/u/383543?v=3","gravatar_id":"","url":"https://api.github.com/users/robertdolca","html_url":"https://github.com/robertdolca","followers_url":"https://api.github.com/users/robertdolca/followers","following_url":"https://api.github.com/users/robertdolca/following{/other_user}","gists_url":"https://api.github.com/users/robertdolca/gists{/gist_id}","starred_url":"https://api.github.com/users/robertdolca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robertdolca/subscriptions","organizations_url":"https://api.github.com/users/robertdolca/orgs","repos_url":"https://api.github.com/users/robertdolca/repos","events_url":"https://api.github.com/users/robertdolca/events{/privacy}","received_events_url":"https://api.github.com/users/robertdolca/received_events","type":"User","site_admin":false},"created_at":"2016-04-12T13:43:37Z","updated_at":"2016-04-12T13:43:37Z","body":"The entry listed as `submission` is port `587`. As far as I know (I don't have allot of experience with postfix) the port number has nothing to do with the connection. As you can see in the wikipedia quote the port you are searching for is legacy.\r\n\r\nYou can force all smtp connection to be encrypted with\r\n\r\n> smtpd_tls_auth_only (default: no)\r\n> When TLS encryption is optional in the Postfix SMTP server, do not announce or accept SASL authentication over unencrypted connections.\r\n> This feature is available in Postfix 2.2 and later."}}