ClearOS Feature Request
Outlook Keeps on asking for certificate
Im a bit new with ClearOS, i am trying to get to work out some issue, been looking an d reading all over the places with SSL/TLS on postfix, bit of a background my ISP is blocking port 25 and 587 as in regards with anti spamming they are doing. i mange to setup the server as a mail server so i can received and send external email inside my LAN. but i wanted to setup my phone or any mobile device to access it from outside my LAN with different ISP or when i am overseas. IMAP seems to be working but my concern is the STMP on SSL/TLS :486 my outlook in keeps on asking for certificate install on my computer to which i did.
inspecting the cert it looks like it was it was the default with no values given information even after updating the it from the CA been searching around to the point of manually updating it i tried the following
cd /etc/zarafa/gateway
mv privkey.pem privkey.pem.old
mv cert.pem cert.pem.old
openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:2048 -keyout privkey.pem -out cert.pem
but still no luck it even cause imap server to not accept or failed to connect. does anyone had this problem and any tips that i can work around this.
TA
inspecting the cert it looks like it was it was the default with no values given information even after updating the it from the CA been searching around to the point of manually updating it i tried the following
cd /etc/zarafa/gateway
mv privkey.pem privkey.pem.old
mv cert.pem cert.pem.old
openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:2048 -keyout privkey.pem -out cert.pem
but still no luck it even cause imap server to not accept or failed to connect. does anyone had this problem and any tips that i can work around this.
TA
Share this post:
Responses (3)
-
Accepted Answer
If you're setting up a new mail server, you may want to read the "Reorganise how you send mail from your clients" section of this HowTo. It also shows you how to enable incoming STARTTLS on 587.
If you're setting up a new server, I suggest you avoid the LAN subnets 192.168.0.0/24 and 192.168.1.0/24. -
Accepted Answer
-
Accepted Answer
I am surprised they are blocking 587 as well, but you would have to do a (one line) modification to ClearOS anyway to get it to listen on 587.
For your certificates, outlook seems to be very strict requiring in-date and not-self-signed certs. It is the only e-mail client I've come across so far like this. The best solution is to use the free Let's Encrypt certificates, for which there is an app, and then follow this HowTo to use them in postfix (the SMTP) server. Also see the section on Zarafa/Kopano if you want to use them for IMAP as well.
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »