[rt-users] Change to SSL cert breaking incoming mail

[asas]

>_______________________________________
>From: rt-users <rt-users-bounces at lists.bestpractical.com> on behalf of Tim Wiley <tim at marchex.com>
>Sent: Wednesday, February 4, 2015 11:09
>To: rt-users at lists.bestpractical.com
>Subject: Re: [rt-users] Change to SSL cert breaking incoming mail
>
>On 02/04/2015 10:52 AM, asas wrote:
>> We recently changed to a new SSL cert with a new CA. After replacing the private key and cert, https works correctly with RT's web interface. But incoming emails get stuck in queue, with this message in exim's logs:
>>
>> 2015-02-04 10:04:23 1YJ4JK-0000LE-V7 <help at ourdomain>: rt_help_transport transport output: An Error Occurred
>> 2015-02-04 10:04:23 1YJ4JK-0000LE-V7 == help at ourdomain
>> R=rt_stathelp_router T=rt_stathelp_transport defer (0): Child process of rt_stathelp_transport transport returned 75 (could mean temporary error) from command: /usr/bin/rt-mailgate
>>
>> We're running RT 4.0.7-5 on Debian 7. After reverting back to the old cert, everything is working again.
>>
>> Any suggestions?
>>
>> Thanks!
>>
>
>If it's not a mainstream trusted CA, check out the --ca-cert option for
>rt-mailgate.


It is a trusted CA, and the cert for the CA is present on the server. That's why I'm so baffled by the problem - the whole cert chain works fine with the web interface.