1 Topic by Energia

  • Energia
  • Member
  • Offline
  • Registered: 2014-05-07
  • Posts: 67

Topic: Changing/replacing SSL certificate

==== Required information ====
- iRedMail version: 0.8.7 (Pro 1.8.2)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Debian Wheezy
- Related log if you're reporting an issue:
====

Hi, we are going to replace our existing SSL/TLS certificate, is it something we do need to be aware of?
(Or is it just to generate a new key-file, buy the new certificate, upload it to the server and replace the name of the existing in postfix/dovecot/apache config-files?)

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,163

Re: Changing/replacing SSL certificate

You're right.

1) generate a new key file, make sure it uses correct server hostname.
2) buy new cert. It requires your private key file.
3) upload to your server, replace SSL cert/key file names in Postfix/Dovecot/Apache/Nginx.

3 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,163

Re: Changing/replacing SSL certificate

I created a new tutorial for this case:

Use a bought SSL certificate: http://www.iredmail.org/docs/use.a.boug … icate.html

4 Reply by Energia

  • Energia
  • Member
  • Offline
  • Registered: 2014-05-07
  • Posts: 67

Re: Changing/replacing SSL certificate

Again, thanks for the fast reply Zhang Huangbin!