Linode Forum
https://forum.linode.com/

Setup of Comodo PositiveSSL certificates on Postfix/Dovecot
https://forum.linode.com/viewtopic.php?f=11&t=10581		 Page 1 of 1
Author:  dee4 [ Sat Nov 02, 2013 6:10 am ]
Post subject:  Setup of Comodo PositiveSSL certificates on Postfix/Dovecot
Suppose that plato.example.com is my mail server.

I have the following files:
  • plato.example.com.key, created on my linode (along with plato.example.com.csr which is submitted to Namecheap when purchasing Comodo PositiveSSL)
  • Comodo gives me back these files: AddTrustExternalCARoot.crt, PositiveSSLCA2.crt, and plato_example_com.crt
What is the proper way of setting up Postfix and Dovecot using all these files?

---

I am a bit confused because on Nginx (if plato.example.com is going to be a web site), I have to cat three files together:

Code:
cat plato_example_com.crt PositiveSSLCA2.crt AddTrustExternalCARoot.crt > plato.example.com.crt

Then I set it up like this:

Code:
ssl_certificate /etc/whatever/plato.example.com.crt;
ssl_certificate_key /etc/whatever/plato.example.com.key;

Do I have to cat files together in a similar way for Postfix and Dovecot?
Author:  AGWA [ Sat Nov 02, 2013 12:40 pm ]
Post subject:  Re: Setup of Comodo PositiveSSL certificates on Postfix/Dove
dee4 wrote:
Do I have to cat files together in a similar way for Postfix and Dovecot?

Yes, you do it exactly the same way as nginx. (In my experience, most server programs work that way, although I have encountered a few that require the intermediate/chain certs[1] to go in a separate file.)

Relevant documentation for Dovecot and Postfix: http://wiki.dovecot.org/SSL/DovecotConf ... rtificates and http://www.postfix.org/postconf.5.html# ... _cert_file

[1] plato_example_com.crt is your certificate, and the others are known as "intermediate" or "chain" certificates.
Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/