Assign TLS certificate for SMTP

Hi,

I want to set up my first CipherMail Gateway. I deployed the community edtition as Hyper-V VM. In the Admin -> SSL/TLS section I cannot find the SMTP section, as described here: https://www.ciphermail.com/documentation/gateway-administration-guide/tls.html#smtp

How can I upload the certificate for SMTP usage? The chapter is not flagged as "pro" in the manual. And StartTLS should be able for everyone, I think.

Regards,
Marcel

Hi Marcel,

For various reasons, the community edition lacks the page on which you
can upload the p12 for the SMTP server. We will review whether we can
add this to the community edition in the next version.

For now, you need to configure this manually on the command line. The
underlying SMTP server is postfix.

A guide on how to configure this can be downloaded from:

https://www.ciphermail.com/documents/ciphermail-tls-guide.pdf

Unfortunately the guide is not completely up-to-date. Because of a
security fix, not all postfix settings can be changed from the GUI.

So for example the settings smtpd_tls_cert_file and smtpd_tls_key_file
cannot be changed using the GUI. These need to be changed from the
command line.

The Postfix settings can be found in the file /etc/postfix/main.cf

Kind regards,

Martijn Brinkers

···

--
CipherMail email encryption
Email encryption with support for S/MIME,
OpenPGP, PDF Messenger and Webmail Messenger

On Wed, 2020-10-28 at 15:28 +0000, Marcel B via Users wrote:

Hi,

I want to set up my first CipherMail Gateway. I deployed the
community edtition as Hyper-V VM. In the Admin -> SSL/TLS section I
cannot find the SMTP section, as described here:
SSL/TLS — CipherMail Documentation

How can I upload the certificate for SMTP usage? The chapter is not
flagged as "pro" in the manual. And StartTLS should be able for
everyone, I think.

Regards,
Marcel
_______________________________________________
Users mailing list -- users(a)lists.ciphermail.com
To unsubscribe send an email to users-leave(a)lists.ciphermail.com

Hi Martijn,

thank you, it is working now :slight_smile:

Regards,
Marcel