Postfix SSL POP3 use Dovecot

yum install openssl
vi /etc/dovecot/conf.d/10-auth.conf
disable_plaintext_auth = yes
auth_mechanisms = plain
vi /etc/dovecot/conf.d/10-ssl.conf
ssl = yes
ssl_cert = </etc/pki/dovecot/certs/cert.pem
ssl_key = </etc/pki/dovecot/private/private.pem
——————————————————————————————
建立憑證(至Dovecot官網下載相關檔案)
http://wiki2.dovecot.org/SSL/CertificateCreation
vi /etc/pki/dovecot/dovecot-openssl.cnf
依環境編輯內容
[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
prompt = no
[ req_dn ]
C=TW
ST=Taiwan
L=Taipei
O=aaazzz.com
OU=cs6
CN=aaazzz.com 必須與使用者的郵件伺服器設定smtp及pop3相同
emailAddress=xxxxxx@aaazzz.com
[ cert_type ]
nsCertType = server
——————————————————————————————
vi /etc/pki/dovecot/mkcert.sh
CERTFILE=$CERTDIR/cert.pem
KEYFILE=$KEYDIR/private.pem
SSLDIR=${SSLDIR-/etc/pki/dovecot} 注意路徑
-days = 365可改成36500即憑證有效期為100年
——————————————————————————————
執行創建憑證腳本/etc/pki/dovecot/mkcert.sh
查看/etc/pki/dovecot/certs與/etc/pki/dovecot/private目錄下有無建立cert.pem與private.pem憑證檔
——————————————————————————————
將pem檔轉成MS Windows認得之pkcs2格式
openssl pkcs12 -export -in /etc/pki/dovecot/certs/cert.pem
-out /etc/pki/dovecot/server.p12 -name "Mail Certificate"
-inkey /etc/pki/dovecot/private/private.pem
——————————————————————————————
將轉出之server.p12傳給使用者安裝
必須注意的是使用者的郵件伺服器設定smtp及pop3
必須與dovecot-openssl.cnf檔內之CN=相同
——————————————————————————————
使用者郵件伺服器設定
POP3 安全連線 – SSL 打勾

——————————————————————————————
使用wireshark擷取郵件傳送封包
內容變亂碼

Single Post Navigation

← Older Entry

Newer Entry →