ERROR: error reading: received fatal alert: UnknownCA

there we go, just fixed the message formatting, sorry it wasn’t syntaxed right

Better, but that is a different error than I was seeing. Is it possible that your injector just has a problem with self signed certs ?

that is a possibility. that’s where I was trying to get more verbosity to figure out which side is giving that error message

is it KumoMTA or the injector

If you can connect ok with swaks using a cert then it is probably the injector issue. Maybe try with a letsencrypt cert?

will Kumo just use whatever cert is in the /etc/pki/tls ?

Yes

Oh wait. No

You need to specify the cert location

oh. huh.

if I did that it wasn’t intentional, I’ll go check my config file

hmm.

it’s asking for a .pem but that wasn’t generated in the commands I follow. I’m certain I know that can be done, but might be something to update in the wiki later :slightly_smiling_face:

SSL is weird. A 509 tup cert usually has a .pem extension but often the .cert or .crt is the same file.

You can test that with openssl

I only have a .csr and .key

I have some instructions som..

Oh

I followed this one