Error installing SSL certificate

Error installing SSL certificate

peopleinside	# November 14, 2015, 5:43 pm \| Post: 10
Group: Member Post Group: Super Member Posts: 1394 Status: Open source, web and security passionate	Hi emco83, BEFORE FOLLOW THIS SUGGESTION PLEASE MAKE SURE TO BACKUP ALL EDITED FILE AND NOTE WHAT YOU HAVE EDITED. I AM NOT Webuzo Staff so my Instruction can be wrong or incomplete or Imperfect. What I am told you here is what i have done to fix this issue, try to follow if you want but is your risk so please backup any edited file and make sure to remember what you have edited or wait for a support of Webuzo Team. I will try to respond to your questions. I am a normal user and I Am not Team of Webuzo Support so this afternoon I can't give to you perfect guide and help. Sorry for that. Your question number 1: You don't need SSL for not have warning in Thunderbird and for have email encrypted. You can use STARTTLS this will show a warning in Thunderbird but can be added an Exception and the client will not show any more the warning. In my experience I have see with time my STARTTLS stopped to work so I had issue with email. In this case i learned you need create self signed certificate Manually via SSH and this is a little long procedure to explain and I hope is not your case. This is good when in exim and dovecot you can see the TLS patch and this is not working on your email client. Now I AM using my SSL certificate as I AM using for my website but you are not forced to buy an SSL certificate but with that maybe Thunderbird will not show the warning. I AM Using a Positive SSl of Comodo bougth from ssls.com For reply to your question I should enter in my server file and look because I AM not expert I have learned with time all of those things so it's little hard for me help you but I will try as now I have little time. Let me check in my server. So your question number 2 I am understanding now you have solved for incoming email LET me try to explain how to solve for outgoing server. In the file 10-ssl.conf located on /etc/dovecot/conf.d the setting row ssl = yes must be yes. below you will find something like: ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key here I think for make work dovecot I have generated self signed certificate and after that checked the .pem file was in dovecot/certs and private folder. Please after checking your ssl is set to yes on 10-ssl run service dovecot restart now check if by removing completely the email account from Thunderbird and by installing new email profile from the start you are able to select STARTTLS also for outgoing. Maybe Thunderbird will not select this by default so please force it manually and test again. IF not work you need to create Self signed certificate for use TLS on Dovecot. This is more complicate also because you will need edit this two row ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key and put two .pem file because you will not able to put .key file. In my dovecot file I have two .pem file. Let me try to explain how i setup dovecot for work with TLS Generate Dovecot or EXIM (with different patch) certificate:root> cd / root > openssl req -new -x509 -days 1000 -nodes -out "/etc/pki/dovecot/certs/cadovecot.pem" -keyout "/etc/pki/dovecot/private/cadovecot.pem" With this command you can verify the certificate (if have errors or not) Root > cat /etc/dovecot/conf.d/10-ssl.conf \| grep ssl now you need find the new cadovecot.pem and check is in the right folder.What is the right folder? You need open 10-ssl.conf and look at the row:ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key So you need have the cadovecot.pem generated into certs and private folder then i suggest to copy this two row "ssl_cert" and "ssl_key"paste under and comment the first you will have: ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key Now i suggest to comment the first two row so you will have in 10-ssl.conf #ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem #ssl_key = </etc/ssl/private/foo.com_wildcard.key ssl_cert = </etc/ssl/certs/foo.com_wildcard.pem ssl_key = </etc/ssl/private/foo.com_wildcard.key Now you have to edit the non commented row with the new name of the self generated certificate so foo.com_wildcard.pem will be cadovecot.pem and foo.com_wildcard.key will be cadovecot.pem you need to save :wq you need to restart dovecot Root > service dovecot restartRoot > exim restart Now try to configure from start the email account in Thunderbird. ----------------------- PeopleInside Web, security, open source passionate.
IP: --