Signed mail certificate

Questions related to the Postfix mail server
Post Reply
mister_v
Posts: 174
Joined: Thu Mar 04, 2010 9:19 pm

Signed mail certificate

Post by mister_v »

Ho do i get a real signed certificate for my mails server?
chris
Site Admin
Posts: 177
Joined: Mon Jul 21, 2008 9:52 am

Re: Signed mail certificate

Post by chris »

you first need to generate csr-file (and key).

Code: Select all

openssl req -new -nodes -keyout mail.server.com.key -out mail.server.com.csr
Make sure you use the same host-name as used in your postfix config file (of dovecot or other mail server)
in this example mail.server.com, not just the domain.

Then send the mail.server.com.csr-file to you registar the be signed.
Now certificates are only signed for a year, so you need to do it every year.

After a few hours, they will send you the signed certificate ( .cert of .crt-file).
chris
Site Admin
Posts: 177
Joined: Mon Jul 21, 2008 9:52 am

Re: Signed mail certificate

Post by chris »

A good site to test your (mail)-ssl is
https://www.checktls.com/index.html
Post Reply