SSL Issues with Domains

marcel

Hey Guys,

I am playing with Grommunio (Newest Version).
I noticed something, When I add teh autodiscover.domain.co.za as a cname record, I get SSL Warnings from outlook stating that the SSL Certificate does not match the domain, but it then ends up checking against the server name pvt.grommunidomain.co.za...

When I remove this record, the error goes away, I assume it's now using the SRV record, which caused the warning to go away.

Does anyone know why this is happening or how to fix it?

Michael

Hi Marcel,

Outlook tries by default to connect to the domain from the used email address, so if you use whatever@domain.com then Outlook tires to connect to autodiscover.domain.com. Then of course, your server has to respond with a valid SSL certificate for this domain. There are several cases and domains required to ensure that everything rides smoothly.

As a start I would recommend using the grommunio appliance as the setup script requests the needed subdomains from letsencrypt and takes care of the configuration.

marcel

The issue comes in due to the fact that the domain which has the email account is not the same as the domain which is used for the server hostname...
So when setting up the appliance, there's obviously no certificate for the email domain...

Which is why I am wondering if there's a solution?

WalterH

marcel Which is why I am wondering if there's a solution?

Setup a correct certificate for your email domain and setup split DNS if needed.