ClearFoundation

Hi,

I'm trying to use SSL with the Cyrus-IMAP email. When I installed it, it used the self signed SSL certificate which was fine; however it kept giving a popup saying the certificate could not be verified. I then purchased a proper certificate, however I still get the same problem.

I merged the key and certificate files to one pem file and then copied this to/etc/pki/cyrus-imapd/cyrus-imapd.pem. (as per a howto). I just don't know where is looks for the ca-cert.pem certificate. My apache ssl works fine

I found my problem. I failed to change the imapd.conf correctly. The below instructions work:

1. Once you received your SSL certificate, open the two files and the key file in a text editor
2. You have to concatenate all three into one file (Include the tags -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----).

the file should look like this:
-----BEGIN CERTIFICATE-----
(your_domain_name.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(your_intermediate.crt)
-----END CERTIFICATE KEY-----
-----BEGIN RSA PRIVATE KEY-----
(your_domain_name.key)
-----END RSA PRIVATE KEY-----

3. Save this to a single file "cyrus-imapd.pem" in the folder /etc/pki/cyrus-imapd
4. Open the Cyrus IMAP configuration file imapd.conf (located in /etc/imapd.conf).
5. Modify or add the following lines
tls_cert_file: /path-to-file/cyrus-imapd.pem
tls_key_file: /path-to-file/cyrus-imapd.pem
tls_ca_file: /path-to-file/cyrus-imapd.pem

6. Restart Cyrus.
service cyrus-imapd restart