Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 7th April 2007, 20:46
unnilennium unnilennium is offline
Junior Member
 
Join Date: Mar 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default how to use ISPconfig SSL certificates with courier

Hello

I'am wondering what is the better way to use ISP config SSL certificates for IMAPS and POPS with courier / POSTFIX.

For the moment I have done :

cat /root/ispconfig/httpd/conf/ssl.key/server.key /root/ispconfig/httpd/conf/ssl.crt/server.crt >pop3d.pem
openssl gendh >>pop3d.pem
cat /root/ispconfig/httpd/conf/ssl.key/server.key /root/ispconfig/httpd/conf/ssl.crt/server.crt >imapd.pem
openssl gendh >>imapd.pem

is there a better way ?
Reply With Quote
Sponsored Links
  #2  
Old 8th April 2007, 13:21
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 34,647
Thanks: 794
Thanked 5,002 Times in 3,911 Posts
Default

Normally you create own certificates for courier and postfix. Please have a look at the perfect setup guides, the creation of the SSL certificates is described there in the mail setup part.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 8th April 2007, 13:39
unnilennium unnilennium is offline
Junior Member
 
Join Date: Mar 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Yes they are created during the installation without doing nothing.


BUT they are first created with localhost instead of the host name of the server. Further more even if i create again the certificat with the good hostname i have to give to accept 2 different cert file to my client in order their browsers stop complainning.

This is such a pain to explain that the cert files are self signed to make them accept the first one , if you tr to make them accept a second one for the same server it 's impossible.

Besides it is common to use one certificat for one IP adress and with a cert file for each deamon running on the machine it is not the case.

So i would like to configure courier-imap-ssl, courier-pop-ssl, smtps and every service that are running on the server with only one certificate the one created for Ispconfig webserver that runs on port 81.

Thanks

JP
Reply With Quote
  #4  
Old 8th April 2007, 21:31
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 34,647
Thanks: 794
Thanked 5,002 Times in 3,911 Posts
 
Default

Quote:
BUT they are first created with localhost instead of the host name of the server. Further more even if i create again the certificat with the good hostname i have to give to accept 2 different cert file to my client in order their browsers stop complainning.
The courier SSL certs has not to be accepted by the browser, they are only presented to the email client. If you run a commercial ISP, you shall consider to use a officially signed SSL cert.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig and SSL Certificates phamels Installation/Configuration 48 2nd April 2009 18:33
SSL Setup In ISPConfig asyadiqin Installation/Configuration 1 6th August 2006 13:18
SSL Request empty when create new SSL in ISPConfig steowimmy Installation/Configuration 10 13th July 2006 20:29
Installing ISPConfig ssl installation certificate to a site? lyndros Installation/Configuration 6 20th March 2006 03:54
Chained / intermediate SSL certificates max Installation/Configuration 5 9th December 2005 05:03


All times are GMT +2. The time now is 22:38.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.