In whm, go to Main >> SSL\/TLS >> Generate a SSL Certificate and
\nSigning Request<\/p>\n
Email Address the Cert will be sent to: user@domain.com
\nCert Info (this will be displayed when a user connects)
\nEmail: user@domain.com
\nPassword: yourpassword
\nHost to make cert for: mail.domain.com
\nCity: anywhere
\nState: anywhere
\nCountry (2 letter abbreviation): US
\nCompany Name: myco
\nCompany Division: IT
\nKey Size 1024<\/p>\n
Click on Create. You will be emailed a new cert. Once the new cert is generated and emailed to you;<\/p>\n
Go into Main >> Service Configuration >> Manage Service SSL Certificates. Click on ‘Install new Certificate’ to the right of the service you would like to install the new cert on; in this case Exim (SMTP) Server. in the top box ‘Paste the entire .crt file here:’ Once completed;
\nPaste the entire .key file here: in the second box. Scroll back up a little and locate the ‘Domain this CRT is for ‘ Browse Button and click it. It should pull the information from the .crt file and add the key that was created earlier via the
\nMain >> SSL\/TLS >> Generate a SSL Certificate and Signing Request
\nOnce the information is in both windows, scroll to the top and click on “Submit” This will (should) return the message if installing cert for exim:<\/p>\n
Main >> Service Configuration >> Manage Service SSL Certificates
\nManage Service Certificates
\nInstall SSL Certificates for Exim (SMTP) Server
\nAttempting to verify your certificate….. Install Complete<\/p>\n
(alot of extra stuff here in the middle regarding stuff you dont understand…)<\/p>\n
Exim MTA…<\/p>\n
Waiting for exim to restart…………..finished.<\/p>\n
exim (\/usr\/sbin\/exim -bd -q60m) running as mailnull with PID 11538 exim (\/usr\/
\nsbin\/exim -tls-on-connect -bd -oX 465) running as mailnull with PID 11547 exim
\n(\/usr\/sbin\/exim -bd -q60m) running as mailnull with PID 11930<\/p>\n
exim started ok<\/p>\n
…Done<\/p>\n
Certificate has been installed!<\/p>\n
Now, it’s time to modify exim to reflect the changes; <\/p>\n
vim \/etc\/exim.conf.com<\/p>\n
modified lines 237-242 (approximate values) in vim, to get line numbers, type this without single quotes, include the colon; ‘ :set number ‘
\nto turn off numbers ‘ :unset numbers ‘
\n 237 #changed default mail cert to mail.domain.com
\n 238 #tls_certificate = \/etc\/exim.crt
\n 239 tls_certificate = \/usr\/share\/ssl\/certs\/mail.domain.com.crt
\n 240
\n 241 #tls_privatekey = \/etc\/exim.key
\n 242 tls_privatekey = \/usr\/share\/ssl\/certs\/mail.domain.com.key<\/p>\n
last but not least, create the .pem key from .crt via the command line using the following commands;
\ncd \/usr\/share\/ssl\/certs
\nroot@server [\/usr\/share\/ssl\/certs]# openssl x509 -in mail.domain.com.crt -out mail.domain.com.der -outform DER
\nroot@server [\/usr\/share\/ssl\/certs]# openssl x509 -in mail.domain.com.der -inform DER -out mail.domain.com.pem -outform PEM in \/usr\/share\/ssl\/certs<\/p>\n
(substitute your domain name for the ‘domain’ listed in the commands and use the caps for the DER and PEM, it is needed.)<\/p>\n
That’s it. You should be able to connect securely to the server via ssh using the following settings;<\/p>\n
In outlook, set your mail server to the host name for SMTP\/POP3\/IMAP to
\nhost.emailservername.com instead of domain.com, where emailservername is the
\nname of the server your account is on (you can find the server you are on via
\nthe Account Information Email) and then make sure that your mail client is
\nusing the following ports for SSL:<\/p>\n
SMTP – 465
\nPOP3 – 995<\/p>\n
As always you want to make sure that your account name is user@domain.com (or
\nuser+domain.com) and that you are using authentication on your SMTP server.<\/p>\n
Use the following settings in your email client (example used is Outlook) to
\nconnect:<\/p>\n
User Information
\nYour Name: First LastName
\nE-mail Address: user@mydomain.com<\/p>\n
Logon Information
\nUser Name: user@mydomain.com
\nPassword: myemailuserpass<\/p>\n
Server Information
\nIncoming mail server (POP3): host.emailservername.com
\nOutgoing mail server (SMTP): host.emailservername.com<\/p>\n
Click the “More Settings…” button, then the Outgoing Server tab,
\nand checked “My outgoing server (SMTP) requires authentication”<\/p>\n
Click the Advanced tab, changed the port back to 25 but keep the “My
\noutgoing server (SMTP) requires a secure connection” checked. Upon
\nrunning the test to check if it is working in Outlook, you should be given an
\nSSL prompt to accept the self signed certificate, indicating it is working.<\/p>\n","protected":false},"excerpt":{"rendered":"
In whm, go to Main >> SSL\/TLS >> Generate a SSL Certificate and Signing Request Email Address the Cert will be sent to: user@domain.com Cert Info (this will be displayed when a user connects) Email: user@domain.com Password: yourpassword Host to make cert for: mail.domain.com City: anywhere State: anywhere Country (2 letter abbreviation): US Company Name:… <\/p>\n