1 Topic by sam-the-man

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Topic: Change default web folder? Enable ssl on mail server url?

Looking to change my roundcube installation from http://mydomain.com/mail to http://mydomain.com/webmail

for extra layer of security, looking to change https://mydomain.com/iredadmin to https://secure.mydomain.com/mailadmin etc

Also, is it important to add https to http://mydomain.com/mail (Default folder)? I feel as if it would be safer but how to configure

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Change default web folder? Enable ssl on mail server url?

sam-the-man wrote:

Looking to change my roundcube installation from http://mydomain.com/mail to http://mydomain.com/webmail

You can access roundcube webmail via 3 URLs:
http://xxx/mail/
http://xxx/webmail/
http://xxx/roundcube/

If you're running RHEL/CentOS/Scieitnfic Linux, refer to /etc/http/conf.d/roundcubemail.conf and /etc/httpd/conf.d/ssl.conf for more details.

sam-the-man wrote:

for extra layer of security, looking to change https://mydomain.com/iredadmin to https://secure.mydomain.com/mailadmin etc

Refer to /etc/httpd/conf.d/ssl.conf for more details. It's configured to use /iredadmin by default, you can change it:

# Original setting.
#WSGIScriptAlias /iredadmin "/var/www/iredadmin/iredadmin.py/"
#Alias /iredadmin/static "/var/www/iredadmin/static/"

# Modified:
WSGIScriptAlias /mailadmin  "/var/www/iredadmin/iredadmin.py/"
Alias /mailadmin/static "/var/www/iredadmin/static/"

For more details, please refer to Apache manual page about command 'Alias'.

sam-the-man wrote:

Also, is it important to add https to http://mydomain.com/mail (Default folder)? I feel as if it would be safer but how to configure

Accessing webmail via https is enabled by default. If you want to force clients to use https, change below setting in Roundcube config file config/main.inc.php:

$rcmail_config['force_https'] = true;

3 Reply by sam-the-man

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Re: Change default web folder? Enable ssl on mail server url?

Omg, is VERY helpful. Now how to move phpldapadmin, phpmyadmin, and awstats to other dir?

Thank you VERY much.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Change default web folder? Enable ssl on mail server url?

It's just same as what you want to change of iRedAdmin in above post.

5 Reply by sam-the-man

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Re: Change default web folder? Enable ssl on mail server url?

So if I install professionally signed certificate on domain "mydomain.com", then "mydomain.com/mail" and "mydomain.com/iredadmin" will also be protected since they are configured to use SSL by default?

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Change default web folder? Enable ssl on mail server url?

Yes.

7 Reply by sam-the-man

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Re: Change default web folder? Enable ssl on mail server url?

but I must rename certificate?

TLSCACertificateFile /etc/ssl/certs/iRedMail_CA.pem
TLSCertificateFile /etc/ssl/certs/iRedMail_CA.pem
TLSCertificateKeyFile /etc/ssl/private/iRedMail.key

These are certificate files? Which must I choose to name my ssl which will go on https://www.mydomain.com??

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Change default web folder? Enable ssl on mail server url?

sam-the-man wrote:

but I must rename certificate?

How about rename your commericial/purchased SSL keys to same file names? Then you don't need to change certification related settings in other components.

9 Reply by sam-the-man (edited by sam-the-man 2011-07-31 22:37:58)

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Re: Change default web folder? Enable ssl on mail server url?

What is the difference between .pem and .key?

I just created CSR. I submit to SSL company. I will receive, in turn, a file called mydomain.com.crt.

I must rename "mydomain.com.crt" to "iRedMail_CA.pem" and place in /etc/ssl/certs?

How do I get the private key? /etc/ssl/private/iRedMail.key

Zhang! I am almost finished now.

Right now I have:

iRedMail_CA.csr
iRedMail_CA.key

I get SSL .crt from company (signed certificate): mydomain.crt

Just need to add to server and integrate with iRedMail and I will be DONEEEEE and I will donate more for your help for this answer! Thanks!!

EDIT:

signed certificate mydomain.crt goes in /etc/ssl/certs (renamed to iRedMail_CA.pem), or goes to /etc/ssl/private (renamed to iRedMail_CA.pem)?

ZhangHuangbin wrote:

Refer to /etc/httpd/conf.d/ssl.conf for more details. It's configured to use /iredadmin by default, you can change it:

File does not exist. Where is a suitable replacement? Need to change settings.

10 Reply by sam-the-man

  • sam-the-man
  • Member
  • Offline
  • Registered: 2011-07-24
  • Posts: 87

Re: Change default web folder? Enable ssl on mail server url?

I must replace contents of: /etc/ssl/certs/iRedMail_CA.pem

with mydomain.com.crt?