Signed mail certificate

[mister_v]

Ho do i get a real signed certificate for my mails server?

[chris]

you first need to generate csr-file (and key).

Code: Select all

openssl req -new -nodes -keyout mail.server.com.key -out mail.server.com.csr

Make sure you use the same host-name as used in your postfix config file (of dovecot or other mail server)
in this example mail.server.com, not just the domain.

Then send the mail.server.com.csr-file to you registar the be signed.
Now certificates are only signed for a year, so you need to do it every year.

After a few hours, they will send you the signed certificate ( .cert of .crt-file).

[chris]

A good site to test your (mail)-ssl is
https://www.checktls.com/index.html