Multiserver setup - Mail SSL

[blinden]

I've tried searching for a while on setting up SSL, but all I can find is a bunch of information on the web portion.

We have our mailserver working well, but I want to add connection security to it, because some clients make a stink if it doesn't exist. The mailserver stands alone in the multiserver setup, handling only mail, and webmail, no additional services are on this machine.

Using ISPConfig 3.0.4.6 on Ubuntu 12.04, all up-to-date packages, Dovecot, Postfix.

If there is information on this already that I wasn't able to find, I apologize, if someone could point me in that direction. My experience with Certificates extends only as far as installing a couple on windows web servers a while back. Seems to be a bit if info on here, but mostly on web, not on mail.

Please let me know if there is more information required. One of my concerns is the multiple domain setup, I figure that only one certificate is required for the whole machine, not per domain?

[till]

http://www.howtoforge.com/securing-y...-from-startssl

[blinden]

Ohh man, thanks, I started reading that one before but, I guess I only glanced at it because of the fact that we are using a certificate from another provider, but I guess other then step 3, it would all basically be the same?

[till]

Yes, the ssl cert installation steps are the same for any SSL cert provider. We just used startssl as example as they provide ssl certs for free.

[misterm]

Hello

local xxx.xxx.xxx.xxx {
protocol imaps {
ssl_ca = </etc/ssl/mail/ca-bundle.crt
ssl_cert = </etc/ssl/mail/ssl0.domaine.be_crt.pem
ssl_key = </etc/ssl/mail/ssl0.domaine.be_key.pem
}
}

Is this a good config to run multiple ssl certificates for imap protocol?

Thank you for helping me, because I'm very bored ...

MM