1 Topic by machca

  • machca
  • Member
  • Offline
  • Registered: 2013-10-05
  • Posts: 3

Topic: start ssl certificate

==== Required information ====
- iRedMail version: 0.8.5
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Linux/BSD distribution name and version: Ubuntu 12.04
- Related log if you're reporting an issue:
====
Hi there
how can I use certificate startssl class 1 with iredmail
https://www.startssl.com/?app=21
thx
Machca

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: start ssl certificate

The link you pasted is a detailed tutorial. On Ubuntu, you should update below parameters in /etc/apache2/sites-available/default-ssl:

SSLCertificateFile
SSLCertificateKeyFile
SSLCertificateChainFile

3 Reply by cygni (edited by cygni 2013-10-09 11:23:04)

  • cygni
  • Member
  • Offline
  • Registered: 2013-09-29
  • Posts: 31

Re: start ssl certificate

==== Required information ====
- iRedMail version: 0.8.5
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Linux/BSD distribution name and version: Debian 7
- Related log if you're reporting an issue: N/A
====

Hi,

My question is tangentially related. Which  and where are all configuration files pointing to '/etc/ssl/certs/iRedMail_CA.pem', '/etc/ssl/private/iRedMail.key', '/etc/ssl/certs/iRedMail_CA_PostgreSQL.pem', and '/etc/ssl/private/iRedMail_PostgreSQL.key'?

Thanks

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: start ssl certificate

All packages except PostgreSQL use default SSL certificate files (iRedMail_CA.pem, iRedMail.key), but PostgreSQL requires strict file permission on SSL certificate files, default ones are not valid. So we have to copy them to iRedMail_CA_PostgreSQL.pem and iRedMail_PostgreSQL.key.

*) iRedMail_CA.pem is the same as iRedMail_CA_PostgreSQL.pem.
*) iRedMail.key is the same as iRedMail_PostgreSQL.key.