SSL Certificate invalid on DNS Only records

I have a STMP server I am trying to set up using MTA-STS and it requires a cname record that points to the origin server. It also requires it to be over SSL so I need the certificate to be valid. With DNS only that seems to not work.
5 Replies
Cyb3r-Jak3
Cyb3r-Jak316mo ago
What certificate do you have on your origin server?
Apollo
ApolloOP16mo ago
The certificate signed by cloudflare From SSL/TLS>Origin Server
Cyb3r-Jak3
Cyb3r-Jak316mo ago
It’s a self signed cert so not publicly trusted. You’ll need something like a let’s encrypt cert
Apollo
ApolloOP16mo ago
Wait I actually do have a LE cert I just use Cloudflare for my forum Should I use Lets Encrypt for both and will that work on an apache server?
Cyb3r-Jak3
Cyb3r-Jak316mo ago
Yeah let’s encrypt for both. The origin cert is only good between origin and Cloudflare

Did you find this page helpful?