Setting up a StartCom certificate for Courier (pop3)

[ayu]

This little guide assumes that you already have a working certificate from StartSSL and a courier server installed with tls support.

Original source:

Code: Select all

http://www.mad-hacking.net/documentation/linux/applications/mail/using-ssl-tls-postfix-courier.xml

You should have the following files already:

Code: Select all

ssl.key
ssl.crt

You need to combine your key and crt file into one:

Code: Select all

cat ssl.key ssl.cert >> courier-combined.pem

Now you need to add Diffie-Hellman parameters to the file that you just created:

Code: Select all

openssl dhparam 1024 >> courier-combined.pem

Now edit "/etc/courier-imap/pop3d-ssl" and make sure that the following is correct:

Code: Select all

POP3_TLS_REQUIRED=1

TLS_CERTFILE=/etc/ssl/courier-combined.pem

Now just restart courier

Code: Select all

/etc/init.d/courier-pop restart
/etc/init.d/courier-pop-ssl restart