Sentora Support Forums

Full Version: how to TLS for sentora mail with letsencrypt
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hi All,
short guide how to set tls for you mail server
Step 1:
go to --> /etc/dovecot/conf.d/10-ssl.conf
and edit the rows:
ssl_cert = </etc/letsencrypt/live/mail.domain.com/fullchain.pem
ssl_key = </etc/letsencrypt/live/mail.domain.com/privkey.pem

Step 2:
go to --> /etc/postfix/main.cf
and edit the rows:
smtpd_tls_cert_file=/etc/letsencrypt/live/mail.domain.com/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/mail.domain.com/privkey.pem
smtpd_use_tls=yes

step 3 :
restart mail + apache2 services

now check your mil account via web http://checktls.com/perl/TestReceiver.pl?ASSURETLS

enjoy hope you like that Smile
Thanks for the contribution!

FYI:
I have step 2 certificate files as:

Code:
# tls config smtpd_use_tls = yes smtpd_tls_security_level = may smtp_tls_note_starttls_offer = yes smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache smtpd_tls_key_file = /etc/letsencrypt/live/mail.domain.com/privkey.pem smtpd_tls_cert_file = /etc/letsencrypt/live/mail.domain.com/cert.pem smtpd_tls_CAfile = /etc/letsencrypt/live/mail.domain.com/chain.pem


Moved to proper forum section.