Configure SSL
2010/07/25 |
Configure for SSL in order to encrypt datas in connection.
|
|
[1] | Create certificates first, see here. |
[2] | Configure for SSL |
root@mail05:~# vi /etc/postfix/main.cf # add at the bottom smtpd_use_tls = yes smtpd_tls_cert_file = /etc/ssl/CA/server.crt smtpd_tls_key_file = /etc/ssl/CA/server.key smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache root@mail05:~# vi /etc/postfix/master.cf # line 17: uncomment smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes root@mail05:~# vi /etc/dovecot/dovecot.conf # line 95: change ssl = yes # line 100,101: uncomment and specify certificates ssl_cert_file = /etc/ssl/CA/server.crt ssl_key_file = /etc/ssl/CA/server.key root@mail05:~# /etc/init.d/postfix restart * Stopping Postfix Mail Transport Agent postfix ...done. * Starting Postfix Mail Transport Agent postfix ...done. root@mail05:~# /etc/init.d/dovecot restart * Restarting IMAP/POP3 mail server dovecot ...done. |
Configure on client. Change settings like following example. (if you use PO3S, input '995 for incoming mail) | |
Click syncronize on Windows Live Mail, then following warning is shown because certificate file is created on your server. It's no ploblem. Click 'Yes' to Proceed, then it's possible to send/receive emails trough SSL connection. | |