19 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Re: Certificate
FromSent OnAttachments
Philipp OffermannJul 6, 2003 11:54 am 
Sam VarshavchikJul 6, 2003 2:32 pm 
Jeff JansenJul 7, 2003 2:09 am 
Peter J. HolzerJul 7, 2003 3:14 am 
Lars HolmströmJul 7, 2003 3:26 am 
Lars HolmströmJul 7, 2003 3:27 am 
Systems AdministratorJul 7, 2003 6:04 pm 
Sam VarshavchikJul 7, 2003 6:39 pm 
Jeff JansenJul 8, 2003 2:40 am 
Julian MehnleJul 8, 2003 2:43 am 
Lars HolmströmJul 8, 2003 4:34 am 
Jeff JansenJul 8, 2003 7:01 am 
Andrew NewtonJul 8, 2003 7:23 pm 
BgsJul 10, 2003 2:06 am 
Julian MehnleJul 10, 2003 2:28 am 
Mitch (WebCob)Jul 10, 2003 6:42 am 
Sam VarshavchikJul 10, 2003 10:01 am 
Mitch (WebCob)Jul 10, 2003 5:02 pm 
Sam VarshavchikJul 10, 2003 5:15 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Re: CertificateActions...
From:Lars Holmström (lars@flysta.net)
Date:Jul 7, 2003 3:27:47 am
List:net.sourceforge.lists.courier-users

I use SSL based IMAP and POP3. SOm eof my clients has OutlookExpress6. They recieve a warning the first time they connect to the Courier server after startup of OE.

Which certificate files should I use for OE6 ? Is it the .pem files as well ?

I did read how to import certificates in to OE6 but I can not admit it was totally clear. If some on know how to do this I would be glad.

/Lars

----- Original Message ----- From: "Jeff Jansen" <ivb_@sil.org> To: <cour@lists.sourceforge.net> Sent: Monday, July 07, 2003 11:08 AM Subject: [courier-users] Re: Certificate

On Monday 07 July 2003 03:01, Philipp Offermann <offe@thielpark.de> wrote:

I've a (quite expensive) signed web-server certificate. Is there any way to use this certificate also for smtp, pop3 and imap-connection for not getting any more warning?

In the /usr/lib/courier/share directory there are three certificates in PEM format: emstpd.pem, imapd.pem and pop3d.pem. These are the certificates that courier uses for those three services. (They are generated automatically if they don't exist.) You need to replace these with your own certificate so that courier will use it. (If you have one certificate that you want to use for all three then symlink those three files to your certificate.)

You need two items in the your certificate file. You need your certificate in PEM format and you need your private key. Neither of these can be passphrase protected. In my case when I created my private key I did passphrase protect it so I had to run it back through openssl to remove the passphrase. Then you can simply 'cat' your private key to the end of your certificate file. So the certificate file looks like this:

-----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- ... -----END RSA PRIVATE KEY-----

If you've got those two elements in there it should work.

Hope that helps.