Configuring Sendmail MTA to work with GlobeSSL Certificates

Sendmail can be configured to encrypt email via the secure socket layer (SSL) when you want to send and receives emails.

1) Open sendmail configuration file /etc/mail/sendmail.mc (although your distribution might keep it elsewhere) using text editor such as vi, emacs, nano with write access:

# vi /etc/mail/sendmail.mc
Now append/modify following directives:
define(`confCACERT_PATH',`/etc/mail/ssl/certs')
     -- location to find certificates
define(`confCACERT',`/etc/mail/ssl/ca-bundle.crt')
      -- Root Bundle file (Make sure you select your server software as Apache & mod_ssl)
define(`confSERVER_CERT',`/etc/mail/ssl/sendmail.crt')
      -- Domain Certificate
define(`confSERVER_KEY',`/etc/mail/ssl/sendmail.key')

And make sure port is set to smtps (secure smtp i.e. port 465):
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl

2) Restart sendmail and secure pop3s/imaps (optional, use the following if using POP/IMAP)
Type the following commands to restart sendmail and related services:
# /etc/init.d/sendmail restart
# chkconfig pop3s on
# chkconfig imaps on
# /etc/init.d/xinetd restart

pop3s and imaps will start from xinetd

Please note the following:
* All certificates provided by GlobeSSL are in PEM format.
* .key file needs to have owner read/write permission for the owner, not group.
* define(`confLOG_LEVEL', `14')dnl ## Will help with debugging. Can be commented out or put back to its default level of 9 when done.

آیا این پاسخ به شما کمک کرد؟

 پرینت این مقاله

در همین زمینه

Certificate Installation: HSphere

To install your certificate, you will need to log in to your HSphere account. You will need a...

Certificate Installation: Nginx

You should have received your certificate from us, a file typically named 'your_domain_com.crt'...

Certificate Installation: Direct Admin

There are a few files you need to edit in order to install the certificate for Direct Admin....

Certificate Installation: Apache

You should have received your certificate from us, a file typically named 'your_domain_com.crt'...

Certificate Installation: IBM HTTP Server

You will need a Dedicated IP for the SSL domain. You cannot install the SSL on to a IP where are...