1

Topic: start ssl certificate

==== Required information ====
- iRedMail version: 0.8.5
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Linux/BSD distribution name and version: Ubuntu 12.04
- Related log if you're reporting an issue:
====
Hi there
how can I use certificate startssl class 1 with iredmail
https://www.startssl.com/?app=21
thx
Machca

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: start ssl certificate

The link you pasted is a detailed tutorial. On Ubuntu, you should update below parameters in /etc/apache2/sites-available/default-ssl:

SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile

3 (edited by cygni 2013-10-09 11:23:04)

Re: start ssl certificate

==== Required information ====
- iRedMail version: 0.8.5
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Linux/BSD distribution name and version: Debian 7
- Related log if you're reporting an issue: N/A
====

Hi,

My question is tangentially related. Which  and where are all configuration files pointing to '/etc/ssl/certs/iRedMail_CA.pem', '/etc/ssl/private/iRedMail.key', '/etc/ssl/certs/iRedMail_CA_PostgreSQL.pem', and '/etc/ssl/private/iRedMail_PostgreSQL.key'?

Thanks

4

Re: start ssl certificate

All packages except PostgreSQL use default SSL certificate files (iRedMail_CA.pem, iRedMail.key), but PostgreSQL requires strict file permission on SSL certificate files, default ones are not valid. So we have to copy them to iRedMail_CA_PostgreSQL.pem and iRedMail_PostgreSQL.key.

*) iRedMail_CA.pem is the same as iRedMail_CA_PostgreSQL.pem.
*) iRedMail.key is the same as iRedMail_PostgreSQL.key.