SSL/TLS and dovecot support for email stack


#1

I’m unable to find any automated script that would provide me SSL/TLS support while sending emails. All emails are sent without any encryption.

in https://easyengine.io/tutorials/mail/server/postfix-dovecot-ubuntu/ was stated following

Cristhian says: December 25, 2013 at 7:39 am I think you should include this (as an option) in your EasyEngine…

Rahul Bansal says: December 25, 2013 at 1:01 pm

This is already in roadmap – https://github.com/rtCamp/easyengine/issues/65 We hope to get there next month. :slightly_smiling_face:

It’s March 2017 - any updates?


#2

Hello Hakabe!

I’ve just come trough a painful way to get my mail server working ([SOLVED] Mail server problems)

You’re going to need a ssl certificate. You can create your own certificate here openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/newmail.key -out /etc/nginx/ssl/newmail.crt

Let’s keep secure the key file chmod 640 /etc/nginx/ssl/newmail.key chown root:ssl-cert /etc/nginx/ssl/newmail.key

You have to enable the dovecot SSL option here /etc/dovecot/conf.d/10-ssl-conf

And let postfix know about your SSL certificate here /etc/postfix/main.cf

Once you got everything set up, restart/reload the services service postfix reload service postfix restart service dovecot reload service dovecot restart

And you finally get your SSL set up ready to secure your mails.

Hope it helps Regards. D.


#3

I ended up getting a Comodo SSL. The installation was pain in the butt as I wanted SSL transports etc. However now it’s working.

Thanks!


#4

Here’s my working configs to anyone who are struggling with sending encrypted mails.

https://pastebin.com/SMP5VDsz main.cf https://pastebin.com/Kx0Sep8E master.cf

I’m also running a Linode $5 VPS (Ubuntu) and I’ve installed iRedmail for it. It works out of the box and it’s robust and lightweight.

No issues within three months. I’m using it for my emails plus as a relay server for my emails what I’m sending from my servers. It also has builtin Roundcube webmail plus Sogo Workgroupware (if you like that more).


#5