Install SSL certificate for email

[mbardelmeijer]

Hi,

I've bought an SSL certificate for our server for secure IMAP and POP connections with an signed certificate. Currently the self-signed from localhost is used.
How do i install this new certificate? I've bought an GeoTrust RapidSSL certificate.

Thanks,

Michel

 

[zEitEr]

Hello,

Put your key into:

for dovecot and apache: /etc/httpd/conf/ssl.key/server.key
for exim: /etc/exim.key

and cert into:

for dovecot and apache: /etc/httpd/conf/ssl.crt/server.crt
for exim: /etc/exim.cert


and restart both exim and dovecot.

More information: https://www.google.com/search?q=install ssl cert site:directadmin.com&gws_rd=ssl

 

[mbardelmeijer]

Hi,

Thank you and sorry for the late response.

I've tried what you've said, but i'm getting errors and am unable to connect with outlook (cert errors).

I've put my .key file in /etc/httpd/conf/ssl.key/server.key and in /etc/exim.key
I've put my .crt in /etc/httpd/conf/ssl.crt/server.crt and /etc/exim.cert

I also have an primary intermediate and secondary intermediate certificate, where should i put those?
I don't have a lot of experience with SSL installation.

Thank you!

 

[zEitEr]

All aditional cert you may add after your main cert into /etc/httpd/conf/ssl.crt/server.crt and /etc/exim.cert

By the way what error do you see when you try to connect via SSL-protected connection?

 

[mbardelmeijer]

Hi! Turns out i've put the primary & intermediate certificate in the wrong order and the key could not match.
The correct order for me was: the requested cert for the domain, intermediate and then primary cert

Thank you very much!

 

[aleko205]

Hi,
Can I use wildcard certificate for pop and imap services? My certificate is for *.mydomain.com and is it an acceptable? Do I need separate certificate for mail.mydomain.com ?

 

[zEitEr]

Hello,

Yes, you can, either install it globally or with mail SNI with an individual domain.