Pahwa ssl - Revision history

Biswajit: /* Renewal of Certificate andits implementation */

2014-12-07T17:58:16Z

Renewal of Certificate andits implementation

← Older revision		Revision as of 17:58, 7 December 2014
Line 144:		Line 144:
	First down load the Certificate from Godaddy Certificate site with authorization information ( For information get in touch with Biswajit Banerjee )		First down load the Certificate from Godaddy Certificate site with authorization information ( For information get in touch with Biswajit Banerjee )

	The ~~Certicate~~ , the Root Certificates and the OLd certicate Key is kept in /certificate/2014-2015		The Certificate , the Root Certificates and the OLd certicate Key is kept in /certificate/2014-2015

	For Postfix - Changes are made in main.cf file by converting "/certicate/.........." to "/certifate/2014-2015/......."		For Postfix - Changes are made in main.cf file by converting "/certicate/.........." to "/certifate/2014-2015/......."

Biswajit at 17:56, 7 December 2014

2014-12-07T17:56:06Z

← Older revision		Revision as of 17:56, 7 December 2014
Line 8:		Line 8:


	= '''Objective''' =		== '''Objective''' ==
	* '''Setup SSL Based Qmail SMTPD , POP3D and IMAPD server on smtps(587) , pop3s (995) , imaps (993), https (443)		* '''Setup SSL Based Qmail SMTPD , POP3D and IMAPD server on smtps(587) , pop3s (995) , imaps (993), https (443)
	'''		'''
Line 52:		Line 52:


	'''IMPLEMENTATION OF POP3S'''		=='''IMPLEMENTATION OF POP3S'''==

	vim /var/qmail/boot/qmail-pop3d-ssl/run		vim /var/qmail/boot/qmail-pop3d-ssl/run
Line 69:		Line 69:


	'''IMPLEMENTATION OF IMAPS'''		=='''IMPLEMENTATION OF IMAPS'''==

	vim /usr/local/etc/imapd-ssl		vim /usr/local/etc/imapd-ssl
Line 89:		Line 89:


	'''SSL IMPLEMENTATION ON APACHE'''		=='''SSL IMPLEMENTATION ON APACHE'''==

	vim /etc/httpd/conf.d/		vim /etc/httpd/conf.d/
Line 105:		Line 105:
	/etc/init.d/httpd restart		/etc/init.d/httpd restart

	'''For SMTPS on POSTFIX'''		=='''For SMTPS on POSTFIX'''==

	vim /etc/postfix/main.cf		vim /etc/postfix/main.cf
Line 126:		Line 126:


	'''Test the settings on thunderbird/outlook/evolution'''		=='''Test the settings on thunderbird/outlook/evolution'''==

	incoming mailserver - mail21c.pahwa.com		incoming mailserver - mail21c.pahwa.com
Line 137:		Line 137:

	'''Reference''' http://192.168.1.15/wiki/index.php/Implementation_of_smtps_pop3s_imaps_and_Https_on_Qmail_Based_Server		'''Reference''' http://192.168.1.15/wiki/index.php/Implementation_of_smtps_pop3s_imaps_and_Https_on_Qmail_Based_Server



			== Renewal of Certificate andits implementation ==

			First down load the Certificate from Godaddy Certificate site with authorization information ( For information get in touch with Biswajit Banerjee )

			The Certicate , the Root Certificates and the OLd certicate Key is kept in /certificate/2014-2015

			For Postfix - Changes are made in main.cf file by converting "/certicate/.........." to "/certifate/2014-2015/......."

			For Apache - Changes are made in /etc/httpd/conf.d/ssl.conf file by converting "/certicate/.........." to "/certifate/2014-2015/......."

			For Qmail ( Pop3d and Imap) - From /certificate/2014-2015 directory
			cat servercert.key servercert.crt gd_bundle.crt > /var/qmail/control/servercert.pem

Biswajit: /* Objective */

2014-12-07T17:40:33Z

Objective

← Older revision		Revision as of 17:40, 7 December 2014
Line 2:		Line 2:
	[[category:Installation]]		[[category:Installation]]
	[[category:Pahwa Group]]		[[category:Pahwa Group]]



			'''[[The Certificate Got Renewed on 7th DEC 2014 Once again , The Renewal Process is at the Bottom ]]'''


	= '''Objective''' =		= '''Objective''' =

Ranjit: /* Objective */

2013-12-14T08:53:16Z

Objective

← Older revision		Revision as of 08:53, 14 December 2013
Line 31:		Line 31:
	openssl genrsa -des3 -out servercert.key.enc 2048		openssl genrsa -des3 -out servercert.key.enc 2048

	openssl ~~genrsa~~ -~~des3~~ -out servercert.key~~.enc 2048~~		openssl rsa -in servercert.key.enc -out servercert.key

	openssl req -new -key servercert.key -out servercert.csr		openssl req -new -key servercert.key -out servercert.csr

Faisal at 13:03, 7 December 2013

2013-12-07T13:03:13Z

← Older revision		Revision as of 13:03, 7 December 2013
Line 129:		Line 129:
	pop3s port - 995		pop3s port - 995
	https://mail21c.pahwa.com		https://mail21c.pahwa.com


			'''Reference''' http://192.168.1.15/wiki/index.php/Implementation_of_smtps_pop3s_imaps_and_Https_on_Qmail_Based_Server

Faisal at 13:01, 7 December 2013

2013-12-07T13:01:39Z

← Older revision		Revision as of 13:01, 7 December 2013
Line 100:		Line 100:
	/etc/init.d/httpd restart		/etc/init.d/httpd restart

	'''		'''For SMTPS on POSTFIX'''
	For SMTPS on POSTFIX'''

	vim /etc/postfix/main.cf		vim /etc/postfix/main.cf

Faisal at 12:59, 7 December 2013

2013-12-07T12:59:01Z

← Older revision		Revision as of 12:59, 7 December 2013
Line 35:		Line 35:
	openssl req -new -key servercert.key -out servercert.csr		openssl req -new -key servercert.key -out servercert.csr

	openssl x509 -in servercert.csr -out servercert.crt -req -signkey servercert.key -days 3650		openssl x509 -in servercert.csr -out servercert.crt -req -signkey servercert.key -days 3650 [self signed cert]


Line 67:		Line 67:

	vim /usr/local/etc/imapd-ssl		vim /usr/local/etc/imapd-ssl


	TLS_PROTOCOL=SSL3		TLS_PROTOCOL=SSL3

	TLS_STARTTLS_PROTOCOL=TLS1		TLS_STARTTLS_PROTOCOL=TLS1

	TLS_CIPHER_LIST="SSLv3:TLS:!ADH:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM:-SSLv2"		TLS_CIPHER_LIST="SSLv3:TLS:!ADH:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM:-SSLv2"

	TLS_CERTFILE=/var/qmail/control/servercert.pem		TLS_CERTFILE=/var/qmail/control/servercert.pem

Line 85:		Line 89:

	SSLEngine on		SSLEngine on

	SSLProtocol -ALL +SSLv3 +TLSv1		SSLProtocol -ALL +SSLv3 +TLSv1

	SSLCipherSuite ALL:!ADH:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM		SSLCipherSuite ALL:!ADH:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

	SSLCertificateFile "/var/qmail/cert/servercert.crt" ( the Actual Certificate)		SSLCertificateFile "/var/qmail/cert/servercert.crt" ( the Actual Certificate)

	SSLCertificateKeyFile "/var/qmail/cert/servercert.key" ( The Actual Key used )		SSLCertificateKeyFile "/var/qmail/cert/servercert.key" ( The Actual Key used )

Line 97:		Line 105:
	vim /etc/postfix/main.cf		vim /etc/postfix/main.cf

	smtpd_use_tls = yes		smtpd_use_tls = yes
	smtpd_tls_auth_only = no		smtpd_tls_auth_only = no
	smtpd_tls_loglevel = 3		smtpd_tls_loglevel = 3
	smtpd_tls_key_file = /certificate/servercert.key		smtpd_tls_key_file = /certificate/servercert.key
	smtpd_tls_cert_file = /certificate/servercert.crt		smtpd_tls_cert_file = /certificate/servercert.crt
	smtpd_tls_received_header = yes		smtpd_tls_received_header = yes
	smtpd_tls_session_cache_timeout = 3600s		smtpd_tls_session_cache_timeout = 3600s
	tls_random_source = dev:/dev/urandom		tls_random_source = dev:/dev/urandom

Faisal at 12:54, 7 December 2013

2013-12-07T12:54:59Z

← Older revision		Revision as of 12:54, 7 December 2013
Line 57:		Line 57:

	ln -s /var/qmail/boot/qmail-pop3d-ssl/ /service		ln -s /var/qmail/boot/qmail-pop3d-ssl/ /service


			To Verify-

	openssl s_client -connect localhost:995		openssl s_client -connect localhost:995


			'''IMPLEMENTATION OF IMAPS'''

	vim /usr/local/etc/imapd-ssl		vim /usr/local/etc/imapd-ssl
Line 68:		Line 73:
	TLS_CERTFILE=/var/qmail/control/servercert.pem		TLS_CERTFILE=/var/qmail/control/servercert.pem


			To Verfiy -

	openssl s_client -connect localhost:993		openssl s_client -connect localhost:993



	'''SSL IMPLEMENTATION ON APACHE'''		'''SSL IMPLEMENTATION ON APACHE'''
Line 102:		Line 111:
	smtps inet n - n - - smtpd		smtps inet n - n - - smtpd
	-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes		-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes



			'''Test the settings on thunderbird/outlook/evolution'''

			incoming mailserver - mail21c.pahwa.com
			outgoing mailserver - mail21c.pahwa.com
			smtps port - 587
			imaps port - 993
			pop3s port - 995
			https://mail21c.pahwa.com

Faisal: /* Objective */

2013-12-07T12:48:27Z

Objective

← Older revision		Revision as of 12:48, 7 December 2013
Line 3:		Line 3:
	[[category:Pahwa Group]]		[[category:Pahwa Group]]

	= Objective =		= '''Objective''' =
	* Setup SSL Based Qmail SMTPD , POP3D and IMAPD server on smtps(587) , pop3s (995) , imaps (993), https (443)		* '''Setup SSL Based Qmail SMTPD , POP3D and IMAPD server on smtps(587) , pop3s (995) , imaps (993), https (443)
			'''

	chmod 1755 /package		chmod 1755 /package
Line 83:		Line 83:
	/etc/init.d/httpd restart		/etc/init.d/httpd restart

			'''
	For SMTPS //		For SMTPS on POSTFIX'''

	vim /etc/postfix/main.cf		vim /etc/postfix/main.cf

Faisal at 12:46, 7 December 2013

2013-12-07T12:46:44Z

← Older revision		Revision as of 12:46, 7 December 2013
Line 47:		Line 47:


	IMPLEMENTATION OF POP3S		'''IMPLEMENTATION OF POP3S'''

	vim /var/qmail/boot/qmail-pop3d-ssl/run		vim /var/qmail/boot/qmail-pop3d-ssl/run
Line 58:		Line 58:
	ln -s /var/qmail/boot/qmail-pop3d-ssl/ /service		ln -s /var/qmail/boot/qmail-pop3d-ssl/ /service

	openssl s_client -connect localhost:995		openssl s_client -connect localhost:995


Line 69:		Line 69:


	openssl s_client -connect localhost:993		openssl s_client -connect localhost:993

	SSL IMPLEMENTATION ON APACHE		'''SSL IMPLEMENTATION ON APACHE'''

	vim /etc/httpd/conf.d/		vim /etc/httpd/conf.d/
Line 98:		Line 98:


	vim /etc/postfix/master.cf		vim /etc/postfix/master.cf

	smtps inet n - n - - smtpd		smtps inet n - n - - smtpd
	-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes		-o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes