Author |
|
breakerfall Newbie
Joined: 23 November 2009
Online Status: Offline Posts: 3
|
Posted: 23 November 2009 at 4:09pm | IP Logged
|
|
|
We're test-driving XMAIL Pro, on a Win2008-64Bit system, with SQL DB. Does this configuration supports the use of SSL/TLS?
If the answer is yes, then:
a.- how is this exactly achieved?
b.- do I need to purchase a certificate for SSL/TLS encryption?
Thx in advance!
|
Back to Top |
|
|
breakerfall Newbie
Joined: 23 November 2009
Online Status: Offline Posts: 3
|
Posted: 23 November 2009 at 4:18pm | IP Logged
|
|
|
Sorry, but I was not clear in my original post. I'm looking to implement SSL/TLS for SMTP and POP protocols, not necessarily for email web access.
|
Back to Top |
|
|
Igor AfterLogic Support
Joined: 24 June 2008 Location: United States
Online Status: Offline Posts: 6104
|
Posted: 24 November 2009 at 2:20am | IP Logged
|
|
|
Quote:
We're test-driving XMAIL Pro, on a Win2008-64Bit system, with SQL DB. Does this configuration supports the use of SSL/TLS? |
|
|
It certainly does.
Quote:
how is this exactly achieved? |
|
|
This is described at this following documentation page.
Quote:
do I need to purchase a certificate for SSL/TLS encryption? |
|
|
Yes, if you need a certificate signed by authority.
--
Regards,
Igor, AfterLogic Support
|
Back to Top |
|
|
breakerfall Newbie
Joined: 23 November 2009
Online Status: Offline Posts: 3
|
Posted: 24 November 2009 at 11:56am | IP Logged
|
|
|
Igor, thank you for your assistance. I was
able to generate both a key and a certificate
to use w/my mail server.
Please be advised of the following though:
a.- The pre-built version of the OpenSSL
libraries and binary that are shipped with the
application will only work on 32-Bit versions
of Windows. I had to find the 64-Bit version
of OpenSSL in order to make it work w/my
setup. It'd be helpful if either both versions
would be shipped w/the software, and, that the
SSL setup page/link you provided me with,
indicated/warned users about this. As well,
you may want to update the page to also
include the link to the OpenSSL code, which I
found here:
http://code.google.com/p/openssl-for-
windows/downloads/list
b.- The hyperlinks in the page you provided
(the ones pointing to OpenSSL's setup
instructions) are no longer valid, though that
may be due to the fact that the links have
changed in OpenSSL.org site.
c.- I was able to determine that POP3-SSL
connections are taking place, however, I'm
having an issue accepting SMTP-TLS connections
. The server is opening the connection
channel, but not responding to the connecting
party with the appropriate banner, thus the
connection drops. I will troubleshoot a bit
more on this, but I may need more assistance
;)
Thank you however for all the help provided
thus far. Looks like we will be purchasing the
product, granted we can get SMTP-TLS to work
correctly.
|
Back to Top |
|
|
Igor AfterLogic Support
Joined: 24 June 2008 Location: United States
Online Status: Offline Posts: 6104
|
Posted: 26 November 2009 at 10:53pm | IP Logged
|
|
|
Thanks for the valuable input!
Quote:
c.- I was able to determine that POP3-SSL connections are taking place, however, I'm having an issue accepting SMTP-TLS connections. The server is opening the connection channel, but not responding to the connecting party with the appropriate banner, thus the connection drops. I will troubleshoot a bit more on this, but I may need more assistance ;) |
|
|
The following steps should be taken to make this work:- generate key and certificate
- place those files (server.key, server.cert) under MailRoot
- uncomment server.tab lines responsible for SSL support in XMail Server Pro:
Code:
#### SSL settings
"SSLWantVerify" "0"
"SSLWantCert" "1"
"SSLAllowSelfSigned" "1"
"SSLUseCertsDir" "1"
"EnableCTRL-TLS" "1"
"EnableSMTP-TLS" "1"
"EnablePOP3-TLS" "1" |
|
|
- restart the service to apply changes
--
Regards,
Igor, AfterLogic Support
|
Back to Top |
|
|