LinuxQuestions.org
View the Most Wanted LQ Wiki articles.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Reply
 
Search this Thread
Old 01-10-2003, 05:14 PM   #1
nateh
LQ Newbie
 
Registered: Jan 2003
Location: Las Vegas
Distribution: RedHat
Posts: 1

Rep: Reputation: 0
Question IMAPS over SSL (imapd.pem) and Ms-Outlook


Im running RedHat 8.0 IMAPS,

Im using Ms-outlook to get my mail over IMAPS port 993

Im using a self-signed cert on my server /usr/share/ssl/certs/imapd.pem from OpenSSL

when I connect to the mail server, mail.intelanet.net over SSL 993
Ms-outlook gives the following message:
"The server you are connected to is using a security certificate that could not be verified. A cert chain processed correctly but terminated in a root cert that is not trusted by the trust provider. Do you want to contunie using this server?"

I click yes and proced to get my mail.

Problem: I want secure mail, wich I have, I do not want that
message to pop up.

Possible solutions:
A. It there a way to tell outlook express to ignore this.

B. how do I go about satisfying outlook by signing my Cert by a CA.

- I tried verisign, they can't give me an answer other than get
a digital ID, wich is not the answer..

If anyone has done this, please let me know how..


Thanks,
 
Old 09-26-2003, 02:36 PM   #2
psychobyte
Member
 
Registered: Sep 2003
Location: Central Coast, California
Posts: 179

Rep: Reputation: 30
Nateh,

Did you ever figure this one out?

I haven't found anything on this subject.

thanx,
 
Old 09-26-2003, 06:09 PM   #3
nuzzy
Member
 
Registered: Aug 2001
Location: New Hampshire, USA
Distribution: Ubuntu 6.06 LTS
Posts: 204

Rep: Reputation: 31
You need to add the cert via Internet Explorer. Do the following:

https://your.mailserver.com:995 or

https://your.mailserver.com:993

995 being POP3s or 993 being secure IMAP

A window will pop up. Select "View Certificate". Then select "Install Certificate". The Certificate Import Wizard will come up. Click "Next". Select "Place all certificates in the following store". Click "Browse" and select "Trusted Root Certificate Authorities". Click "OK". Click "Next" Click "Finish". You will be prompted with the certificate info. Select "Yes". Import successful. Click OK twice. Now click "Yes" at the Security Alert window that originally came up. You'll see some stuff in Explorer. Even though it says "-ERR Protocol Error" it still got installed. You can view it by going to Tools-->Internet Options-->Content Tab. Select the Certificates button and then drop down the menu to find the TRusted Root Authorities. You shoud see your cert.
 
Old 09-30-2003, 12:29 PM   #4
psychobyte
Member
 
Registered: Sep 2003
Location: Central Coast, California
Posts: 179

Rep: Reputation: 30
Nuzzy,

I like your little hack.

But, I found another way of doing it aswell.

The private key and certificate are all one file. imapd.pem.

One needs to seperate them so you can do this.

openssl x509 -in imapd.pem -out imapd.crt

you can then provide this to users and they can install it via IE.
 
Old 12-20-2009, 02:45 AM   #5
ambyvalent
LQ Newbie
 
Registered: Dec 2009
Posts: 1

Rep: Reputation: 0
The last answer is perfect

Quote:
Originally Posted by psychobyte View Post
Nuzzy,

I like your little hack.

But, I found another way of doing it aswell.

The private key and certificate are all one file. imapd.pem.

One needs to seperate them so you can do this.

openssl x509 -in imapd.pem -out imapd.crt

you can then provide this to users and they can install it via IE.
It makes perfect sense to get the crt from the impad.pem file and importing the crt into the trusted root

Thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
slack imapd + tls/ssl & thunderbird [GOD]Anck Slackware 4 02-24-2009 02:33 PM
In courier-imap imapd.pem file is not been able to create manish_2479 Linux - Networking 1 10-03-2007 06:25 PM
Dovecot IMAPs SSL certificate nyk Linux - Software 1 11-14-2005 07:58 AM
unable to create imapd.pem file manish_2479 Linux - Networking 0 09-13-2004 03:55 PM
Pem certificate perhaps silva Linux - Newbie 1 07-17-2003 05:00 AM


All times are GMT -5. The time now is 10:40 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration