1 Topic by zimennik

  • zimennik
  • Member
  • Offline
  • Registered: 2015-10-28
  • Posts: 7

Topic: This Connection is Untrusted

Hello again.
I faced another problem.
When I try to go to mysite.com/mail, appears "This Connection is Untrusted". Please tell me, what it may be due and how to fix it.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: This Connection is Untrusted

Buy a ssl certificate.

And here's our tutorial:
http://www.iredmail.org/docs/use.a.boug … icate.html

3 Reply by zimennik

  • zimennik
  • Member
  • Offline
  • Registered: 2015-10-28
  • Posts: 7

Re: This Connection is Untrusted

ZhangHuangbin wrote:

Buy a ssl certificate.

And here's our tutorial:
http://www.iredmail.org/docs/use.a.boug … icate.html


thanks a lot!

4 Reply by Vortex

  • Vortex
  • Member
  • Offline
  • Registered: 2014-05-20
  • Posts: 54

Re: This Connection is Untrusted

Hello Zhang. I have setup  StartSSL certificate as per the instructions in the tutorial in default-ssl.conf.  I commented out the iredmail certificates and restarted.  That was good, but the mysql database died.  I put the original iredmail settings back, but still had a problem so needed to add [mysqld] open_files_limit = 50000 to get mysql working again.

My question is, should I comment out the iredmail certificate setup in default-ssl.conf?

  I'm reluctant to go further until I get your answer as ouir mail server was off-line for 6 hours while I figured out how to fix it.

Thanks, Greg

5 Reply by Vortex

  • Vortex
  • Member
  • Offline
  • Registered: 2014-05-20
  • Posts: 54

Re: This Connection is Untrusted

ZhangHuangbin wrote:

Buy a ssl certificate.

And here's our tutorial:
http://www.iredmail.org/docs/use.a.boug … icate.html

Hi Zhang, please see my post of today @ 8:46, thanks.

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: This Connection is Untrusted

Hi Greg,

What's your issue now? Cannot start MySQL service?

7 Reply by Vortex (edited by Vortex 2015-10-30 06:56:03)

  • Vortex
  • Member
  • Offline
  • Registered: 2014-05-20
  • Posts: 54

Re: This Connection is Untrusted

ZhangHuangbin wrote:

Hi Greg,

What's your issue now? Cannot start MySQL service?

Hi Zhang, no I can start mySQL all is ok.  I was asking if I need to remove the iredmail certificate lines in default-ssl.conf.  The parts labelled GP are what I put in.  But should I then comment out the iredmail SSL Certificate directives?

        #   SSL Engine Switch:
        #   Enable/Disable SSL for this virtual host.
        SSLEngine on
## GP
 #      SSLProtocol all -SSLv2
 #     SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
##
        #   A self-signed (snakeoil) certificate can be created by installing
        #   the ssl-cert package. See
        #   /usr/share/doc/apache2/README.Debian.gz for more info.
        #   If both key and certificate are stored in the same file, only the
        #   SSLCertificateFile directive is needed.        
       SSLCertificateFile /etc/ssl/certs/iRedMail_CA.pem
       SSLCertificateKeyFile /etc/ssl/private/iRedMail.key
## GP
#    SSLCertificateFile /etc/ssl/private/mydomain.crt
#    SSLCertificateKeyFile /etc/ssl/private/decrypt.mydomain.key
#    SSLCertificateChainFile /etc/ssl/certs/VBoX-ssl.class1.server.ca.pem        
#    SSLCACertificateFile /etc/ssl/private/VBoX-ssl-ca.pem

Thanks in advance, Greg

8 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: This Connection is Untrusted

If you're using bought SSL certificate, you must comment out the iredmail certificate lines, and use the one you bought.

9 Reply by Vortex

  • Vortex
  • Member
  • Offline
  • Registered: 2014-05-20
  • Posts: 54

Re: This Connection is Untrusted

Hi Zhang, thanks for your reply.  So have done that commenting and tested the cert via https://www.geocerts.com/ssl_checker and it was all good.

However still getting a browser error for mail login: 

This website does not supply ownership information.

Are you able to give me an idea why?

Thanks, Greg

10 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: This Connection is Untrusted

No clear idea. Does your SSL cert contain your organization info? e.g. your company name, your email address?

I suggest you ask your SSL cert provider instead.

11 Reply by Vortex

  • Vortex
  • Member
  • Offline
  • Registered: 2014-05-20
  • Posts: 54

Re: This Connection is Untrusted

ZhangHuangbin wrote:

No clear idea. Does your SSL cert contain your organization info? e.g. your company name, your email address?

I suggest you ask your SSL cert provider instead.

Thanks Zhang.  Got all going without error.  Much appreciated.

Greg