Re:Mail-in-a-Box – one-click, easy-to-deploy email server
by ProxCoques on Monday November 28, 2016 @05:05PM
(#13058826)
LetsEncrypt needs port 80 open to the outside so that it can verify/renew certificates. I don't have port 80 open on the mail server though.
[ Parent
| on HN ]
Re:Mail-in-a-Box – one-click, easy-to-deploy email server
by Whitestrake on Monday November 28, 2016 @06:53PM
(#13059463)
LetsEncrypt actually has multiple options available for validation. Only one challenge type, http-01, requires port 80 to be open. Another, tls-sni-01, requires port 443. dns-01 requires configuration of your DNS provider. I personally make use of tls-sni-01 and dns-01 in different situations.