{"action":"created","issue":{"url":"https://api.github.com/repos/hardware/mailserver/issues/315","repository_url":"https://api.github.com/repos/hardware/mailserver","labels_url":"https://api.github.com/repos/hardware/mailserver/issues/315/labels{/name}","comments_url":"https://api.github.com/repos/hardware/mailserver/issues/315/comments","events_url":"https://api.github.com/repos/hardware/mailserver/issues/315/events","html_url":"https://github.com/hardware/mailserver/issues/315","id":368269588,"node_id":"MDU6SXNzdWUzNjgyNjk1ODg=","number":315,"title":"Mailserver certificate dosnt match with hostname","user":{"login":"elielam","id":34446626,"node_id":"MDQ6VXNlcjM0NDQ2NjI2","avatar_url":"https://avatars2.githubusercontent.com/u/34446626?v=4","gravatar_id":"","url":"https://api.github.com/users/elielam","html_url":"https://github.com/elielam","followers_url":"https://api.github.com/users/elielam/followers","following_url":"https://api.github.com/users/elielam/following{/other_user}","gists_url":"https://api.github.com/users/elielam/gists{/gist_id}","starred_url":"https://api.github.com/users/elielam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elielam/subscriptions","organizations_url":"https://api.github.com/users/elielam/orgs","repos_url":"https://api.github.com/users/elielam/repos","events_url":"https://api.github.com/users/elielam/events{/privacy}","received_events_url":"https://api.github.com/users/elielam/received_events","type":"User","site_admin":false},"labels":[{"id":323822084,"node_id":"MDU6TGFiZWwzMjM4MjIwODQ=","url":"https://api.github.com/repos/hardware/mailserver/labels/Support%20/%20question","name":"Support / question","color":"1d76db","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-10-09T15:29:24Z","updated_at":"2018-10-09T22:54:48Z","closed_at":"2018-10-09T20:44:51Z","author_association":"NONE","body":"#### Classification\r\n\r\n* [X] Question\r\n\r\n#### Reproducibility\r\n\r\n* [X] Always\r\n\r\n#### Docker information\r\n \r\n```\r\nContainers: 24\r\n Running: 24\r\n Paused: 0\r\n Stopped: 0\r\nImages: 24\r\nServer Version: 18.06.1-ce\r\nStorage Driver: overlay2\r\n Backing Filesystem: extfs\r\n Supports d_type: true\r\n Native Overlay Diff: true\r\nLogging Driver: json-file\r\nCgroup Driver: cgroupfs\r\nPlugins:\r\n Volume: local\r\n Network: bridge host macvlan null overlay\r\n Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog\r\nSwarm: inactive\r\nRuntimes: runc\r\nDefault Runtime: runc\r\nInit Binary: docker-init\r\ncontainerd version: 468a545b9edcd5932818eb9de8e72413e616e86e\r\nrunc version: 69663f0bd4b60df09991c08812a60108003fa340\r\ninit version: fec3683\r\nSecurity Options:\r\n apparmor\r\n seccomp\r\n  Profile: default\r\nKernel Version: 4.15.0-29-generic\r\nOperating System: Ubuntu 18.04.1 LTS\r\nOSType: linux\r\nArchitecture: x86_64\r\nCPUs: 8\r\nTotal Memory: 31.28GiB\r\nName: services\r\nID: B5IG:XAEA:7EJU:ICAX:OSOV:SXCH:SZPC:NC2L:HSDY:6ZDP:KIA2:Q4N7\r\nDocker Root Dir: /var/lib/docker\r\nDebug Mode (client): false\r\nDebug Mode (server): false\r\nRegistry: https://index.docker.io/v1/\r\nLabels:\r\nExperimental: false\r\nInsecure Registries:\r\n 127.0.0.0/8\r\nLive Restore Enabled: false\r\n\r\nWARNING: No swap limit support\r\n```\r\n\r\n```\r\nREPOSITORY            TAG                 DIGEST                                                                    IMAGE ID            CREATED             SIZE\r\nhardware/mailserver   1.1-stable          sha256:e3e1021aebbf134b2cb14b6306aeb478881d57ad78657998c9e022a1c891e8a1   b12411bf5132        2 weeks ago         379MB\r\n```\r\n\r\n#### Description\r\n\r\nI configured Traefik to deliver certificate to it's domain.\r\nIt's work perfectly except for mailserver who don't get the right cert.\r\nIt's a problem for some tools who don't have the disable certificate checking when require smtp connection.\r\n\r\nLike each of my subdomain have cert for domain.tld except mail and its subdomain who have cert for mail.domain.tld.\r\n\r\nIt's describe in traefik.toml with this : \r\n\r\n```\r\n[[acme.domains]]\r\nmain = \"domain.tld\"\r\nsans = [\"cloud.domain.tld\",\"dashboard.domain.tld\",\"flood.domain.tld\",\"git.domain.tld\",\"jackett.domain.tld\",\"monitoring.domain.tld\",\"monitoring.db.domain.tld\",\"ombi.domain.tld\", \"plex.domain.tld\",\"radarr.domain.tld\",\"sonarr.domain.tld\",\"tautulli.domain.tld\",\"tracker.domain.tld\"]\r\n[[acme.domains]]\r\nmain = \"mail.domain.tld\"\r\nsans = [\"dashboard.mail.domain.tld\",\"monitoring.mail.domain.tld\",\"web.mail.domain.tld\"]\r\n```\r\n\r\n#### Expected results\r\n\r\nI expected a mail.domain.tld cert for :\r\n>mail.domain.tld\r\n>dashboard.mail.domain.tld\r\n>monitoring.mail.domain.tld\r\n>web.mail.domain.tld\r\n\r\n#### Actual results\r\n\r\n![image](https://user-images.githubusercontent.com/34446626/46679311-fe0d4800-cbe6-11e8-8b0d-37add769aca6.png)\r\n\r\nWhen mailserver start it dosn't match with acme.json file :\r\n\r\n![image](https://user-images.githubusercontent.com/34446626/46679921-3f522780-cbe8-11e8-8f47-c8c4d284951b.png)\r\n\r\nActually the mailserver use my primary domain cert who dosn't match with my mailserver hostname.\r\n\r\n#### Debugging information\r\n\r\ndocker-compose volumes :\r\n\r\n```\r\nvolumes:\r\n      - /srv/appdata/utilities/mail:/var/mail\r\n      - /srv/appdata/tools/traefik/acme.json:/etc/letsencrypt/acme\r\n```\r\n\r\ndomain dkim :\r\n\r\n```\r\nmail._domainkey | TXT | 1h | \"v=DKIM1; k=rsa; p=MYKEY'\" \r\n```\r\n\r\n#### Configuration (docker-compose.yml, traefik.toml...etc)\r\n\r\n```\r\ndebug = false\r\nlogLevel = \"ERROR\"\r\n\r\ndefaultEntryPoints = [\"https\",\"http\"]\r\n\r\n[entryPoints]\r\n  [entryPoints.http]\r\n  address = \":80\"\r\n    [entryPoints.http.redirect]\r\n    entryPoint = \"https\"\r\n  [entryPoints.https]\r\n  address = \":443\"\r\n    [entryPoints.https.tls]\r\n\r\n[retry]\r\n\r\n[acme]\r\nemail = \"adress@mail.tld\"\r\nstorage = \"acme.json\"\r\nentryPoint = \"https\"\r\n[acme.tlsChallenge]\r\nonHostRule = true\r\nonDemand = true\r\n[acme.httpChallenge]\r\nentryPoint = \"http\"\r\n[[acme.domains]]\r\nmain = \"domain.tld\"\r\nsans = [\"cloud.domain.tld\",\"dashboard.domain.tld\",\"flood.domain.tld\",\"git.domain.tld\",\"jackett.domain.tld\",\"monitoring.domain.tld\",\"monitoring.db.domain.tld\",\"ombi.domain.tld\", \"plex.domain.tld\",\"radarr.domain.tld\",\"sonarr.domain.tld\",\"tautulli.domain.tld\",\"tracker.domain.tld\"]\r\n[[acme.domains]]\r\nmain = \"mail.domain.tld\"\r\nsans = [\"dashboard.mail.domain.tld\",\"monitoring.mail.domain.tld\",\"web.mail.domain.tld\"]\r\n\r\n[docker]\r\nendpoint = \"unix:///var/run/docker.sock\"\r\ndomain = \"domain.tld\"\r\nwatch = true\r\nexposedByDefault = false\r\n```\r\n\r\nYou can answer in french I understand better, sorry for my english.\r\n\r\nThank you in advance."},"comment":{"url":"https://api.github.com/repos/hardware/mailserver/issues/comments/428380669","html_url":"https://github.com/hardware/mailserver/issues/315#issuecomment-428380669","issue_url":"https://api.github.com/repos/hardware/mailserver/issues/315","id":428380669,"node_id":"MDEyOklzc3VlQ29tbWVudDQyODM4MDY2OQ==","user":{"login":"navossoc","id":2457338,"node_id":"MDQ6VXNlcjI0NTczMzg=","avatar_url":"https://avatars0.githubusercontent.com/u/2457338?v=4","gravatar_id":"","url":"https://api.github.com/users/navossoc","html_url":"https://github.com/navossoc","followers_url":"https://api.github.com/users/navossoc/followers","following_url":"https://api.github.com/users/navossoc/following{/other_user}","gists_url":"https://api.github.com/users/navossoc/gists{/gist_id}","starred_url":"https://api.github.com/users/navossoc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/navossoc/subscriptions","organizations_url":"https://api.github.com/users/navossoc/orgs","repos_url":"https://api.github.com/users/navossoc/repos","events_url":"https://api.github.com/users/navossoc/events{/privacy}","received_events_url":"https://api.github.com/users/navossoc/received_events","type":"User","site_admin":false},"created_at":"2018-10-09T22:54:48Z","updated_at":"2018-10-09T22:54:48Z","author_association":"CONTRIBUTOR","body":"Really? I didn't realize that until you said it.\r\n\r\nNo problem, we've all been there."}}
{"actor":{"display_login":"navossoc"}}