Demo
Demo

Knowledge base

smtp-certificate verifiedimportantWritten by the Hub

Certificate for STARTTLS

in the configuration this is a linesmtp-certificate:

Certificate presented for STARTTLS on the intake; without it, neither TLS nor AUTH is offered.

Values

Values
path to a PEM certificate
Default
· taken from the build
applying
restart required
where it can be set
in the config file · with a startup flag · as an environment variable

In detail

A submission channel without a certificate carries credentials in the clear — which is why the engine refuses to advertise AUTH at all rather than let that happen. Hub issues a self-signed certificate when it enables authentication, which encrypts the channel; a customer who wants a verifiable name replaces it with their own.

What happens if you get it wrong

Missing while smtp-auth is set.Authentication is configured but never offered; the intake stays open by IP.verified by experiment · inference
Present without smtp-privatekey.TLS cannot be established; the handshake fails after the client asks for STARTTLS.inference · inference