Dynamic loading of TLS certificates

[DSpeichert]

Does the sni configuration options of the server.tls section support any means of dynamic lookup? A directory support would be great here but I don't believe a "rule" would apply because there seems to be no value to compare.

A use case is a "white label" style server setup, where each domain uses its own hostname for the SMTP/IMAP/JMAP server (e.g. email.) and those certificates need to be dynamically provided, ideally without reloading or restarting the server.

[mdecimus]

This can be done using SNI which can be configured in the TLS section of the configuration file.

[DSpeichert]

Hi @mdecimus,

I'm familiar with the TLS section options but not so much with the ability to tie that in with a directory (i.e. SQL). Is that possible already?

[mdecimus]

Sorry, I had misread your first post. No, at the moment it is not possible to dynamically configure SNI certs from a directory, they have to be manually defined in the configuration file. Feel free to open an issue requesting this feature.