wget http://www.startssl.com/certs/sub.class1.server.ca.pem -O sub.class1.server.ca.pem
cat www_certificate.pem sub.class1.server.ca.pem > /etc/ssl/certs/dovecot.pem
cat www_privatekey.pem > /etc/ssl/private/dovecot.pem
chown root:ssl-cert /etc/ssl/private/dovecot.pem
chmod 644 /etc/ssl/private/dovecot.pem
chown root:root /etc/ssl/certs/dovecot.pem
chmod 444 /etc/ssl/certs/dovecot.pem
In /etc/dovecot/conf.d/10-ssl.conf
ssl_cert_file = /etc/ssl/certs/dovecot.pem
ssl_key_file = /etc/ssl/private/dovecot.pem
wget http://www.startssl.com/certs/ca.pem -O /tmp/ca.pem
openssl s_client -CAfile /tmp/ca.pem -connect mail.example.org:993
No comments:
Post a Comment