[GH-ISSUE #387] Docker compose TLS/SSL ceriftcate not readebale

kerem commented

2026-03-15 13:27:05 +03:00

Owner

Originally created by @aiamk on GitHub (Nov 14, 2024).
Original GitHub issue: https://github.com/axllent/mailpit/issues/387

hello,

i tried all the ways and still didn't figure out how to solve this permission issue in docker, Kindly I need your help, i am not sure if i did a mistake or i missed something:

2024-11-14 21:18:39 time="2024/11/14 18:18:39" level=error msg="[smtp] TLS key not found or readable: =/certs/localhostKey.pem"


    mailpit:
        image: axllent/mailpit
        volumes:
            - './docker/mailpit/data:/data'
            - './docker/certs:/certs'
        ports:
            - 8025:8025
            - 1025:1025
        environment:
            MP_MAX_MESSAGES: 5000
            MP_DATABASE: /data/mailpit.db
            MP_SMTP_AUTH_ACCEPT_ANY: true
            MP_SMTP_AUTH_ALLOW_INSECURE: true
            
            MP_SMTP_TLS_KEY=: '/certs/localhostKey.pem'
            MP_SMTP_TLS_CERT: '/certs/localhostCert.pem'

            MP_SMTP_REQUIRE_STARTTLS: true
            MP_SMTP_REQUIRE_TLS: true
            MP_SMTP_AUTH: "webmaster:password info:password"

Best Regards.

Originally created by @aiamk on GitHub (Nov 14, 2024). Original GitHub issue: https://github.com/axllent/mailpit/issues/387 hello, i tried all the ways and still didn't figure out how to solve this permission issue in docker, Kindly I need your help, i am not sure if i did a mistake or i missed something: `2024-11-14 21:18:39 time="2024/11/14 18:18:39" level=error msg="[smtp] TLS key not found or readable: =/certs/localhostKey.pem"` ``` mailpit: image: axllent/mailpit volumes: - './docker/mailpit/data:/data' - './docker/certs:/certs' ports: - 8025:8025 - 1025:1025 environment: MP_MAX_MESSAGES: 5000 MP_DATABASE: /data/mailpit.db MP_SMTP_AUTH_ACCEPT_ANY: true MP_SMTP_AUTH_ALLOW_INSECURE: true MP_SMTP_TLS_KEY=: '/certs/localhostKey.pem' MP_SMTP_TLS_CERT: '/certs/localhostCert.pem' MP_SMTP_REQUIRE_STARTTLS: true MP_SMTP_REQUIRE_TLS: true MP_SMTP_AUTH: "webmaster:password info:password" ``` Best Regards.

kerem closed this issue

2026-03-15 13:27:11 +03:00

kerem commented

2026-03-15 13:27:16 +03:00

Author

Owner

@axllent commented on GitHub (Nov 14, 2024):

Hi @aiamk. Do those certificates exist?

@axllent commented on GitHub (Nov 14, 2024): Hi @aiamk. Do those certificates exist?

kerem commented

2026-03-15 13:27:21 +03:00

Author

Owner

@aiamk commented on GitHub (Nov 14, 2024):

yes, i already checked them in mailpit container, i even made another certificates and i had the same issue

@aiamk commented on GitHub (Nov 14, 2024): yes, i already checked them in mailpit container, i even made another certificates and i had the same issue

kerem commented

2026-03-15 13:27:26 +03:00

Author

Owner

@axllent commented on GitHub (Nov 14, 2024):

Considering they are self-signed certificates, could you please attach them here so I can try & investigate? Thanks.

@axllent commented on GitHub (Nov 14, 2024): Considering they are self-signed certificates, could you please attach them here so I can try & investigate? Thanks.

kerem commented

2026-03-15 13:27:31 +03:00

Author

Owner

@aiamk commented on GitHub (Nov 14, 2024):

sure :

@aiamk commented on GitHub (Nov 14, 2024): sure : ``` -----BEGIN CERTIFICATE----- MIIEHzCCAoegAwIBAgIRAMLNiR2uS+sh5OZquhD7k34wDQYJKoZIhvcNAQELBQAw WzEeMBwGA1UEChMVbWtjZXJ0IGRldmVsb3BtZW50IENBMRgwFgYDVQQLDA9haWFt a0BhaWFtay1wcGMxHzAdBgNVBAMMFm1rY2VydCBhaWFta0BhaWFtay1wcGMwHhcN MjQxMDAxMTI1MzE3WhcNMjcwMTAxMTI1MzE3WjBDMScwJQYDVQQKEx5ta2NlcnQg ZGV2ZWxvcG1lbnQgY2VydGlmaWNhdGUxGDAWBgNVBAsMD2FpYW1rQGFpYW1rLXBw YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANomnP6Udo0OjpwxYbQZ FIFazSxjzss6xwPozbhDDoQHUm9QPAd8k0C6/Ntn9392ggI4b6v/78CKTYjKr/Bx uUpODz185gdbMX8CVlp7BLFxMqnHDdT6snfshiCn7GJE8rePVhHmCm3D85o22TkV OqPKj9GrCMfEZZVVRfu/pKlNf5BtYrvdXDyLpRNOnUnt1bVQCkrbdOxIANMqZBoV +53OhNMi2T9A/SNhWldU/wSpZLmeKfOtKHLcs9alPEHwj3qMNdzOBCNcyAVfBuqj Dl3YhmQzvFwAFKy+80LYOL6S2Rwz1IvqQ91s64LB1VSk8BSrLtELBucfxwwysL9e uV0CAwEAAaN2MHQwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB MB8GA1UdIwQYMBaAFMDgXUp41pPF/4WrDV+dNJ9ZadhMMCwGA1UdEQQlMCOCCWxv Y2FsaG9zdIcEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0BAQsFAAOC AYEAG1e91+tRQ5aXIeU8q7exGR9GB8yp0IPIUKLxp6DuyKZ4bd3dOjizl+c4blIj 4Gq0EVeKgozXWbhNbUiepsHobOkuy2w56NNVmE7i5KhcHt1tr++QntecfpS7AN+P jAZlCcSzlNk9SnTozgsVVnQm/xvY/RLmdrhydUa4sjk5D700NZCwiFfPXbx2mlhh MHo9E7CakfMmQ1ijpSNyzkA5d4JScGEWkyYbzC/9TGdz7gQfGy5ytsWDVwv2w+AD NnaHhTTZx3SBCAh6LLG57bFNmRFr+JxLr1R/DIi3YD6LTH+0e/M2Ni4f1PWiGCe0 GEMcQBuUls7A3rCFNC1d4FZPcMHC9oJmC3UwHW8LKlKX+SbPuzGORtA4ys89TjMn pHkV9Y1qlZJYSBcQbsG1++TGX4zzYGpK5dhYDOI15dIxiMzmn96c50fTKr1C+X2y Xy8gqaLvRyJ0Nt4Z0yGmIhIQ5wGroWLbrCgsFJMigzLE+24sL58RoLWBao8EqEIv iV98 -----END CERTIFICATE----- ``` ``` -----BEGIN PRIVATE KEY----- MIIEwAIBADANBgkqhkiG9w0BAQEFAASCBKowggSmAgEAAoIBAQDaJpz+lHaNDo6c MWG0GRSBWs0sY87LOscD6M24Qw6EB1JvUDwHfJNAuvzbZ/d/doICOG+r/+/Aik2I yq/wcblKTg89fOYHWzF/AlZaewSxcTKpxw3U+rJ37IYgp+xiRPK3j1YR5gptw/Oa Ntk5FTqjyo/RqwjHxGWVVUX7v6SpTX+QbWK73Vw8i6UTTp1J7dW1UApK23TsSADT KmQaFfudzoTTItk/QP0jYVpXVP8EqWS5ninzrShy3LPWpTxB8I96jDXczgQjXMgF Xwbqow5d2IZkM7xcABSsvvNC2Di+ktkcM9SL6kPdbOuCwdVUpPAUqy7RCwbnH8cM MrC/XrldAgMBAAECggEBAInPZNQqg63eaVbgl0FHqr2A2CZXstaN/hVJJ1RlADGF 0pzBSfrMxtVYis4sIpziB4VRk7JLj3DJrethZ730icIYB+anFUXGZUE//79PAYr6 4K+CMQm/iajawWy1yE3YEqDFKvFJqoLnC+f7CETYVWANYcdpTbWtKyMoaHp9+Y59 XFT4qng4/lZuZ1wGj2FnD5sJ3Qiq8y2ZRHAfGqBSTt2VIrWI1v1xwh+CGyJTRTLS +v81vAACPN9/Isf8DDD/++g2ZHOk1rGXGX02AcF//3oP35mIRmg9WeGECNnsysaj NC/rXOilkcDyLdrqlVfPc/AlRXC+6iJuxUichLyYfqECgYEA/pt+lBUk8D6ssvv8 8uGi7UPmKTadm1qF9hbdWp/Hy/KyoSHgjJNlx6M3Huh34NIHcnezGH9liiSbokE4 XUyJHxjahrfSg9zhb4IImhrl5R0TW7VjfDji1uZ1BgCBGBJvnfEFpVs8SnSFa0SG 7tO4Y01UuOqsqIkbV8oUrAvaQIkCgYEA21gSW/Sg8jNHWqZw6gdlRiiNJ7vZgZaU Cw+VBqli7JwdN5ECT2cSy2KegFanM5EuqE8I8fhFCmZYQTuAMwDhIR8KhG9xAkEj /4mtwPb6/tvsKu19TN2bmuQ/fKWXu+FCcjZ3yvtDoqpeX1Jqj4ZttGX6eOeopQkV Fpw97cp7NTUCgYEA71rpLXePSVfybTVeQEuFKr75YmdY1ZLNe2NVZ3vsjbw02CyL +DwdpAe5qxHqmO16WM9VDEPABpWRxoC/514rTpPD5IBtpM+DE5xQT+fXloO2DjJB O6gTAOqYuzLAKgwy6G2M3D4gOPK/9u7uVxmtL5Wkf08HUE3M6cQtmOxvmtkCgYEA ygD+R3mvj97x4+ZNLvrIpihKd0FlOxc2GEmtcYkl9cqAjeAaRI4knPKiDoe/TJp0 YcUH8/A1hTJkLQ9jLZWtwBcaVIVdijn7sSdWwdOzrGtVwOMe9l9RIwD6Bw1qBDmc PBs1j9Z/n5tPdnIseSnQdsdEOXz/r54BseUKk6had9ECgYEAllTMCawM9/3bpYN8 wX3qahUZtAoadSEc/gdv3FHAHTDoOPLX+paNd0MdIxSc/5o6hS5NLMHuMMtYpDMf 6rT1VWKXBhnhIsIGm/TJ8anYHiCsZE1+4nEkLkZEFgnQbLy8/8tgAvYhKufG+iES A1fYpz4B3xHTDrwbzU+QYMHhKMc= -----END PRIVATE KEY----- ```

kerem commented

2026-03-15 13:27:37 +03:00

Author

Owner

@axllent commented on GitHub (Nov 14, 2024):

Thanks. I'll need to get back to you in about 6 hours 👍

@axllent commented on GitHub (Nov 14, 2024): Thanks. I'll need to get back to you in about 6 hours :+1:

kerem commented

2026-03-15 13:27:42 +03:00

Author

Owner

@aiamk commented on GitHub (Nov 14, 2024):

take your time bro,
i appreciate your help,
thank you

@aiamk commented on GitHub (Nov 14, 2024): take your time bro, i appreciate your help, thank you

kerem commented

2026-03-15 13:27:47 +03:00

Author

Owner

@axllent commented on GitHub (Nov 15, 2024):

OK, so your options are all over the place (you have several conflicting requirements), and more importantly, you have a typo in your YAML syntax which is the cause of your reported error - MP_SMTP_TLS_KEY=: '/certs/localhostKey.pem' has a =: which is invalid and is probably causing an extra pace or something in the path. It should be MP_SMTP_TLS_KEY: '/certs/localhostKey.pem' which works fine here.

So, (after fixing the typo) and depending on what you are trying to achieve here:

You can set MP_SMTP_REQUIRE_STARTTLS or MP_SMTP_REQUIRE_TLS (or neither), but not both
You can set MP_SMTP_AUTH_ACCEPT_ANY or MP_SMTP_AUTH (or neither), but not both

Without knowing what environment you are trying to replicate I cannot give you more direction. Using a self-signed certificate is perfectly fine, provided you have control over the SMTP client to accept a self-signed certificate. Most of the time I don't use any TLS for SMTP as I don't need to test that and it makes my life much easier.

Based on what you pasted, I think your configuration should be:

services:
  mailpit:
    image: axllent/mailpit
    volumes:
      - './docker/mailpit/data:/data'
      - './docker/certs:/certs'
    ports:
      - 8025:8025
      - 1025:1025
    environment:
      MP_MAX_MESSAGES: 5000
      MP_DATABASE: /data/mailpit.db
      
      MP_SMTP_TLS_KEY: '/certs/localhostKey.pem'
      MP_SMTP_TLS_CERT: '/certs/localhostCert.pem'

      MP_SMTP_REQUIRE_STARTTLS: true
      MP_SMTP_AUTH: "webmaster:password info:password"

This will provide you with a STARTTLS requirement (for a self-signed certificate) and SMTP authentication requiring either webmaster:password or info:password as credentials.

I hope this helps!

@axllent commented on GitHub (Nov 15, 2024): OK, so your options are all over the place (you have several conflicting requirements), and more importantly, you have a typo in your YAML syntax which is the cause of your reported error - `MP_SMTP_TLS_KEY=: '/certs/localhostKey.pem'` has a `=:` which is invalid and is probably causing an extra pace or something in the path. It should be ` MP_SMTP_TLS_KEY: '/certs/localhostKey.pem'` which works fine here. So, (after fixing the typo) and depending on what you are trying to achieve here: 1. You can set `MP_SMTP_REQUIRE_STARTTLS` or `MP_SMTP_REQUIRE_TLS` (or neither), but not both 2. You can set `MP_SMTP_AUTH_ACCEPT_ANY` or `MP_SMTP_AUTH` (or neither), but not both Without knowing what environment you are trying to replicate I cannot give you more direction. Using a self-signed certificate is perfectly fine, provided you have control over the SMTP client to accept a self-signed certificate. Most of the time I don't use any TLS for SMTP as I don't need to test that and it makes my life much easier. Based on what you pasted, I think your configuration should be: ```yaml services: mailpit: image: axllent/mailpit volumes: - './docker/mailpit/data:/data' - './docker/certs:/certs' ports: - 8025:8025 - 1025:1025 environment: MP_MAX_MESSAGES: 5000 MP_DATABASE: /data/mailpit.db MP_SMTP_TLS_KEY: '/certs/localhostKey.pem' MP_SMTP_TLS_CERT: '/certs/localhostCert.pem' MP_SMTP_REQUIRE_STARTTLS: true MP_SMTP_AUTH: "webmaster:password info:password" ``` This will provide you with a STARTTLS requirement (for a self-signed certificate) and SMTP authentication requiring either `webmaster:password` or `info:password` as credentials. I hope this helps!

kerem commented

2026-03-15 13:27:52 +03:00

Author

Owner

@aiamk commented on GitHub (Nov 15, 2024):

thank you very much bro for you efforts & help,
i am very sorry of this inconvenience typo mistake in docker compose, i couldn't see means i am getting old :|

actually i need tls & ssl to test my email library.

Best Regards,

@aiamk commented on GitHub (Nov 15, 2024): thank you very much bro for you efforts & help, i am very sorry of this inconvenience typo mistake in docker compose, i couldn't see means i am getting old :| actually i need tls & ssl to test my email library. Best Regards,

kerem commented

2026-03-15 13:27:57 +03:00

Author

Owner

@axllent commented on GitHub (Nov 15, 2024):

It's no problem, we all make mistakes!

@axllent commented on GitHub (Nov 15, 2024): It's no problem, we all make mistakes!

kerem commented

2026-03-15 13:28:02 +03:00

Author

Owner

@axllent commented on GitHub (Nov 16, 2024):

And thank you for the donation! ❤️

@axllent commented on GitHub (Nov 16, 2024): And thank you for the donation! :heart:

Rows
Columns

[GH-ISSUE #387] Docker compose TLS/SSL ceriftcate not readebale #250