Page 1 of 1

Signed mail certificate

Posted: Sat Apr 17, 2021 11:57 am
by mister_v
Ho do i get a real signed certificate for my mails server?

Re: Signed mail certificate

Posted: Sat Apr 17, 2021 12:14 pm
by chris
you first need to generate csr-file (and key).

Code: Select all

openssl req -new -nodes -keyout mail.server.com.key -out mail.server.com.csr
Make sure you use the same host-name as used in your postfix config file (of dovecot or other mail server)
in this example mail.server.com, not just the domain.

Then send the mail.server.com.csr-file to you registar the be signed.
Now certificates are only signed for a year, so you need to do it every year.

After a few hours, they will send you the signed certificate ( .cert of .crt-file).

Re: Signed mail certificate

Posted: Sat Apr 17, 2021 4:18 pm
by chris
A good site to test your (mail)-ssl is
https://www.checktls.com/index.html