• SSL Certificates
• Installing SSL Certificates

Related GoWebsite.com Articles

• Setting up a SSL for Intel vPro
• Generating a CSR and Installing an SSL Certificate on SonicWALL UTM Devices
• Installing an SSL Certificate in F5 BIG-IP Loadbalancer
• Installing an SSL Certificate - Nginx
• Installing an SSL Certificate in Microsoft IIS 8
• Installing an SSL Certificate in Microsoft IIS 5
• Installing an SSL Certificate in Microsoft IIS 7

Installing an SSL in Courier IMAP

After your certificate request is approved, download your SSL and intermediate certificate files from your account. See Downloading Your SSL Certificate for more information. You must install all the files on your Web server to complete the installation.

To Install Your SSL in Courier IMAP

1. Gather your certificate files.
   Log in to your SSL Manager and download your primary and intermediate certificates. You also need your private key (your_domain.key), which was generated by your server along with your CSR.
2. Create a combined .pem certificate file.
   Using a text editor such as Notepad, paste in the contents of the primary certificate and your private key, including the BEGIN and END tags. For example:
   -----BEGIN CERTIFICATE-----
   (Your primary certificate: your_domain.crt)
   -----END CERTIFICATE-----
   -----BEGIN RSA PRIVATE KEY-----
   (Your private key: your_domain.key)
   -----END RSA PRIVATE KEY-----
   Save the file as sfcertpack.pem
3. Save the Starfield intermediate certificate.
   Copy the Starfield intermediate certificate into a text editor and save the file as sfca.txt
4. Secure Courier IMAP.
   Locate and open imapd-ssl file (usually found in /usr/lib/courier-imap/etc/). Add the following directives and file locations:
   • TLS_CERTFILE=/some/path/sfcertpack.pem
   • TLS_TRUSTCERTS=/some/path/sfca.txt
   Verify that the line below allows SSLv3:
   • TLS_PROTOCOL=SSL3
5. Secure POP3.
   Locate and open pop3d-ssl file (typically found in /usr/lib/courier-imap/etc/). Add the following directives and file locations:
   • TLS_CERTFILE=/some/path/sfcertpack.pem
   • TLS_TRUSTCERTS=/some/path/sfca.txt
6. Verify your file permissions.
   Ensure sfcertpack.pem is readable by root only.
7. Restart your Courier IMAP server.

Older email clients might not support SSLv3 or TLSv1. If you want to support users with old email clients, configure IMAP_TLS_REQUIRED=0 in both IMAP and POP3 files.