dovecot - Nov 2014 - Different SSL certificates per IP and protocol

Hi Dovecot Users and Developers,

I am hosting the server with multiple domains.

I have setup the dovecot with the instructions from 
http://wiki2.dovecot.org/SSL/DovecotConfiguration


Each domain has it's own ip address.  However, when I connect via 
Thunderbird or any other mail clients, the client is ONLY picking up the 
top-level "default" ssl_key and ssl_cert and the certificat in 
/etc/ssl/dovecot.pem

Is this a bug?

This is on Debian Wheezy.  Any help pointing in the right direction 
would be appreciated thanks.

Here is the ssl section:
-----------
ssl_cert = </etc/ssl/dovecot.pem
ssl_key = </etc/ssl/dovecot.pem
local 192.0.2.10 { # instead of IP you can also use hostname, which will 
be resolved
   protocol imap {
     ssl_cert = </etc/ssl/dovecot/imap-01.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/imap-01.example.com.key.pem
   }

   protocol pop3 {
     ssl_cert = </etc/ssl/dovecot/pop-01.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/pop-01.example.com.key.pem
   }
}

local 192.0.2.20 {
   protocol imap {
     ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/imap-02.example.com.key.pem
   }

   protocol pop3 {
     ssl_cert = </etc/ssl/dovecot/pop-02.example.com.cert.pem
     ssl_key  = </etc/ssl/dovecot/pop-02.example.com.key.pem
   }
}
-----------------------

Il 17/11/2014 16:20, tree ha scritto:
> Hi Dovecot Users and Developers,
>
> I am hosting the server with multiple domains.
>
> I have setup the dovecot with the instructions from 
> http://wiki2.dovecot.org/SSL/DovecotConfiguration
>
>
> Each domain has it's own ip address.  However, when I connect via 
> Thunderbird or any other mail clients, the client is ONLY picking up 
> the top-level "default" ssl_key and ssl_cert and the certificat
in
> /etc/ssl/dovecot.pem
>
> Is this a bug?
>
> This is on Debian Wheezy.  Any help pointing in the right direction 
> would be appreciated thanks. 
Hi,

what "hostname" is set in the client "pop/imap" remote
server?

Try also with SNI that in more simple to use (no Ip dedicated is needed) 
and I can confirm that works fine with Debian server and Thunderbird as 
email client.