CSR Support

Dovecot POP/IMAP server

Creating a Certificate Signing Request

  1. Install OpenSSL, if not found on server, and place it in PATH.
  1. Create a key for your server by:

openssl genrsa -out /etc/ssl/private/mail.yourserver.com.key 1024

  1. Create CSR:

openssl req -new -nodes -key /etc/ssl/private/mail.yourserver.com.key -out /etc/ssl/mail_yourserver_com.csr

  1. When creating a CSR you must follow these conventions.

Enter the information to be displayed in the certificate.

The following characters are not accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&

Wildcard certificates must start with *. characters

 

 

Distinguished Name Field

Explanation

Example

Country Name

The two-letter ISO abbreviation for your country

US = United States

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

City or Locality

The city where your organization is located.

Atlanta

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Server Admin.'s email address

Your email address

abc@yourURL.com

 
 
  1. Submit your CSR to IPSCA.  


CSR installation

 


Installing a Server Certificate using Dovecot POP/IMAP

Step one: Save the Certificate

  1. IPSCA will send your Certificate by e-mail. You will also require an intermediate certificate available here ipsCACLASEA1.crt. Each certificate will look something like the following: 

          -----BEGIN CERTIFICATE-----
      JIEBSDSCEXoCHQEwLQMJSoZILvoNVQECSQAwcSETMRkOAMUTBhMuVrM
      mIoAnBdNVBAoTF1JTQSBEYXRhIFNlY3VyaXR5LCBJbmMuMRwwGgYDVQ 
      QLExNQZXJzb25hIENlcnRpZmljYXRlMSQwIgYDVQQDExtPcGVuIE1hc
      mtldCBUZXN0IFNlcnZlciAxMTAwHhcNOTUwNzE5MjAyNzMwWhcNOTYw
      NTE0MjAyOTEwWjBzMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIER
      hdGEgU2VjdXJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydG
      lmaWNhdGUxJDAiBgNVBAMTG09wZW4gTWFya2V0IFRlc3QgU2VydmVyI
      DExMDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDU/7lrgR6vkVNX40BA
      q1poGdSmGkD1iN3sEPfSTGxNJXY58XH3JoZ4nrF7mIfvpghNi1taYim
      vhbBPNqYe4yLPAgMBAAEwDQYJKoZIhvcNAQECBQADQQBqyCpws9EaAj
      KKAefuNP+z+8NY8khckgyHN2LLpfhv+iP8m+bF66HNDUlFz8ZrVOu3W 
      QapgLPV90kIskNKXX3a 
      -----END CERTIFICATE-----
  2. Copy the server certificate, including the lines from the beginning and the end of the certificate into a text editor such as Notepad (do not use Word or another word processor) Make sure that the certificate appears as formatted above. In other words, make sure that the lines aforementioned are included.

  3. Save the server certificate as a text file with a .crt file extension to your OpenSSL certs directory, usually /usr/local/ssl/certs but this may vary depending on your particular configuration.

Step two: Install the Intermediate Certificate

You will need to install the intermediate certificate ipsCACLASEA1.crt so that browsers can trust your certificate.

  1. Copy the server certificate, including the lines from the beginning and the end of the certificate into a text editor such as Notepad (do not use Word or another word processor) Make sure that the certificate appears as formatted above. In other words, make sure that the lines aforementioned are included.

  2. Save the server certificate as a text file with a .crt file extension to your OpenSSL certs directory, usually /usr/local/ssl/certs but this may vary depending on your particular configuration.

Step three: Configure Devecot POP/IMAP

In the Virtual Host settings for your site, in the dovecot.conf file, you will need to add the following SSL directives.This may be achieved by:

Dovecot config file is /etc/dovecot/dovecot.conf

Relevant settings:

protocols = pop3s imaps

#debian etch ssl paths
ssl_cert_file = /etc/ssl/certs/mail.yourserver.com.crt
ssl_key_file = /etc/ssl/private/mail.yourserver.com.key

ssl_ca_file = /etc/ssl/certs/IPSCACLASEA1.crt

Save your dovecot.conf file and restart.

return to the top

© 1996 - 2007 ipsCA, IPS Certification Authority, S.L. all Rights reserved.
Our CPS summarized or complete, CRLs, Root Certificates and legal documents
  can be found in our repository
Read our  Privacy Policy and Terms of Use