I am running Postfix and Dovecot on my mail server. I am required now to have SSL/TLS on my mail server. I did check and found out that I have a SSL certificate with Verisign issued to my mail servers FQDN. Now my question is when reading the Dovecot Wiki, I noticed it said that it is not common to use SSL but rather TLS on most mail servers. Even though SSL will work, which should I use on my server? We already have a purchased SSL certificate but does that really matter? Should I simply just revoke that certificate & use TLS instead? So when I read this link: http://wiki.dovecot.org/SSL/DovecotConfiguration Is it talking about a actual SSL certificate or TLS? Thanks for any clarification! - Carlos
On 6/26/2009 2:53 PM, Carlos Williams wrote:> http://wiki.dovecot.org/SSL/DovecotConfiguration > > Is it talking about a actual SSL certificate or TLS? > > Thanks for any clarification!There's no such thing as a 'TLC Certificate'... TLS uses standard SSL certs, so just use your current one no worries... :) -- Best regards, Charles
Carlos Williams ?????:> Is it talking about a actual SSL certificate or TLS?You should read this: http://en.wikipedia.org/wiki/Transport_Layer_Security Your certificate is ok and will work with SSL&TLS. SSL just binds to special port(like 993 in IMAP by default). -- Best regards, Proskurin Kirill
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 30 Jun 2009, Carlos Williams wrote:> No I do not. I don't even have a /etc/ssl/ direcory on my mail serverhmm, do you have openssl installed at all :) ? I had guessed that any openssl package comes with at least a bunch of CA certs. Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSkohlXWSIuGy1ktrAQJqFQf+Pjz5KUVwmt8tG5KeiMMOEYsPWztBVj49 SDw8gOT/DzeoXtArcXy2vdZ0U2Zm1t85wwkjMW43JE02lbsjHLek3LlcEia2uWEA Vba5v4UyKO54YEhuhgxXiavaxSawocGGZmW+7SaHOni3sCKH6Vidl+3qw/5zJl2p a7Y+52HZOow1EPf+MegOL7nFwUY9beLixWN8I0QGz1CZDWMPRUvjTjBO+En44JJX pOYScPB+v/k/NFNXLjkilJJBYOpzhKXQjJzZCEhgaQMD/uuJJM96xaz7bwK/VTxf 3p0ovHTKWT7T3Fa6RR7jZZgEb8hDQsll1nnOZ4dzX3MgQk9Dzj/XPg==VYN5 -----END PGP SIGNATURE-----