SSL issue - traefik missing

lumideez

got this error while trying to connect Epson printer to my mail smtp setup using mailcow:

The connection is not trusted
check the following
-CA certificate

I just checked my server and discovered there’s no Traefik container that contains mail-acme running but my mail server has a valid certificate. Please how can I create an SSL and be able to download the certificate to add to my printer

Ganzjahresgriller

We don’t know anything about your installation and our crystal ball isn’t working right now. You could also ask: My car is not working right now, why

ETNyx

Hello,

well using printers are just second hell just after Windows,… As I can say your printer does not trust certificate, right? Than I would suggest to updater firmware of your printer and hope that your vendor include more modern CA.

pkernstock

A few things:

mailcow is not using traefik. It is expected to not exist in a mailcow stack.
The container for ACME is called acme-mailcow, not mail-acme and that should exist.
If your certificate is valid, then good. If your printer doesn’t know the CA certificate, your printer is possibly not trusting the LetsEncrypt CA. That’s a issue you need to work on with your printer (vendor). Either import the CA to be trusted, software update or buy a new one.

Also, I have updated the title to not ‘scream’ that much.

lumideez

pkernstock is there a way to import the CA certificate from the server and upload it directly to the printer

ETNyx

lumideez directly to the printer

Ask your printer manual/manufacture.

And you do not want to import your certificate, your certificate is valid only 3 months. Systems usually have package like this https://packages.debian.org/search?keywords=ca-certificates that contain intermediate certificate that is trusted much longer such as R10 issued by ISRG Root X1 till Fri, 12 Mar 2027. This one is most likely intermediate to yours.

But this is usually done by vendor, so try to update your printer.

esackbauer

Configure the printer to use port 25, and no encryption, no authentication.
In mailcow admin UI, configure the printer IP address as “forwarding host”, and whitelist it for postscreen.