SSL Email (between the software and the server)

[fairfax1]

I have a site using DirectAdmin on a shared server setup with my own real SSL certificate. https://www.mydomain.com works like it should for secure http traffic.

I use Mozilla Thunderbird for my email. I noticed there was a choice in it to use SSL encryption. The point is to encrypt the password being sent back and forth between the software and the mailserver and not PGP style private key encryption like digital signatures. I don't like my password going in cleartext if I can help it.

Whenever I access the account, I get an error about a domain name mismatch. The mail server seems to being using the default self-signed "localhost" certificate. My questions is since I have my own real SSL certificate already installed, is there a way to get the mail server to use it instead of the default one. I don't have any choice in DirectAdmin besides installing the certificate (which I already did).

My hosting company wasn't sure it was possible to do this or not.

Any ideas?

Thanks!

 

[GXX]

Yes, you can use real certs for SSL thru exim or dovecot. Works quite for well actually.

http://www.directadmin.com/forum/showthread.php?t=27796&highlight=ssl+exim

 

[nobaloney]

I have a site using DirectAdmin on a shared server setup with my own real SSL certificate. https://www.mydomain.com works like it should for secure http traffic.

No it doesn't. It fails to connect. Reason probably found here.

I use Mozilla Thunderbird for my email. I noticed there was a choice in it to use SSL encryption. The point is to encrypt the password being sent back and forth between the software and the mailserver and not PGP style private key encryption like digital signatures. I don't like my password going in cleartext if I can help it.

Whenever I access the account, I get an error about a domain name mismatch. The mail server seems to being using the default self-signed "localhost" certificate. My questions is since I have my own real SSL certificate already installed, is there a way to get the mail server to use it instead of the default one. I don't have any choice in DirectAdmin besides installing the certificate (which I already did).

No, because since your account is on a shared server the server administrator has to install a server-wide certificate. Discuss this with your hosting provider.

My hosting company wasn't sure it was possible to do this or not.

They have to do it. See the post immediately above this one, but since you can't do it yourself, have your hosting company look at the referenced thread.

Jeff

 

[GXX]

That's a most excellent link Jeff