Koozali.org: home of the SME Server

SSL Intermediate Certs + Mail

dgaukrog

SSL Intermediate Certs + Mail
« on: April 19, 2006, 12:01:32 PM »
Hi guys, I'm trying to install SSL certificates on my SME 7.0rc1 server and I have run into a problem with the way the mail server is handling them.

I have the key, certificate and intermediate certificate all installed and when accessed via https all is well, but when I connect via pop3 or IMAP with SSL only the server certificate is downloaded which is then untrusted because the intermediate certificate is missing.

I have been using http://no.longer.valid/phpwiki/index.php/Creating%20SSL%20Certificates and http://forums.contribs.org/index.php?topic=30320.msg126905#msg126905 as my references.

Can anyone provide some further guidance?

##Edit##

I've solved the problem from a practical point of view by getting the clients to manually import the intermediate certificate. This is fine for the few dozen users who use this server, but I'm still interested whether there is a way for these certs to be served without manual intervention.