Topic: Email Certificates for Secure Email

[SSBN]

Email Certificates for Secure Email

I have the contrib set up that lets me have authentication for my SMTP and ssl. What I can’t figure out or find info on is how to get rid of the accept certificate request when I send email. My server is 6.01 and my client computer is outlook 2003. How do I add the sme certificate to outlook 2003?

Thanks

[bjennings]

If I remember correctly, you go to http://youremailserver:25  and when pops up something about certificates, you can tell it to save the certificate.  Maybe someone can give you some better instructions.

[mbachmann]

You have to install the cert into OL. But as long as the domain name/DNS name/local name did not match exactly, the cert will be asked for every time. I also have not figured out how the "matching" is done correctly. See http://www.ibiblio.org/pub/Linux/distributions/smeserver/contribs/dungog/help/SMEhelp/Web%20server%20SSL%20Certificate.html

[NickCritten]

Hi All,

There are three things that are checked by the Browser / Mail client when connecting via SSL...

1) The Issuer of the Certificate,
2) The Start / Expiry Date of the Certificate,
3) The "name" on the Certificate.

If the certificate has expired or has not yet come into effect, the client machine will not trust the certificate and will check every time that you want to continue.

If the "name" on the certificate does not match the servername you are trying to access, (e.g the Certificate is for www.domain.com and you are going to mail.domain.com) then it will pop up and ask you every time.

If the Issuer is not trusted, then you can tell it to install the certificate and it will not ask again.


Basicly, if you want to access the secure email server, and not have the popup every time, you have two options...

1) In the server address, enter hostname.domain.com. this is the default certificate that is created when you install SME. (this certificate will only work for 12Months afetr the first date of installation.

2) Create a new ssl certificate, if you don't know how, I have a document on my server that should help you...  http://www.nsluk.org/ssl.htm
When you create the certificate, it will ask you for "Your Name"  instead enter the server address that you would like to use to connect. e.g mail.domain.com

The only problem that I have found is that if you installed the Secure Email addon BEFORE you created the certificate that Secure Email will continue using the old certificate.

If anyone knows how to make the Secure mail addon update its SSL certificate from the http one.. PLEASE let me know

Hope this was helpful.

[mbachmann]

Nick, there is another "creating SSL certs" from C. Haloner with contrib from Craig Genner and Richard Osborne based on Shelby Moore's work here, just to let you know. But it will not help in resolving the secure mail issue.

http://no.longer.valid/phpwiki/index.php?pagename=Creating%20SSL%20Certificates