# Using the Web GUI certificate for SMTP TLS, changing MTA config file **URL:** \ **Category:** Gateway\ **Created:** [April 11, 2017, 10:58am UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539 "2017-04-11T10:58:20Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![m.erdmann](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@m.erdmann](https://community.ciphermail.com/u/m.erdmann)\ **Post date:** [April 11, 2017, 10:58am UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539/1 "2017-04-11T10:58:20Z")
I read in the manual that changing the TLS configuration for the SMTP server through the GUI is available only in the 'Enterprise' version, We've installed a third-party (Digicert) certificate for the Web interface. Would it be possible to modify the MTA config file to use this Web certificate for SMTP TLS as well? It now points to a self-signed certificate I assume:   # server side TLS configuration   smtpd\_tls\_cert\_file = /etc/postfix/tls.pem   smtpd\_tls\_key\_file = $smtpd\_tls\_cert\_file Regards, Michel Erdmann ---
**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\ **Post date:** [April 11, 2017, 11:08am UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539/2 "2017-04-11T11:08:25Z")
CipherMail gateway uses Postfix for the MTA part so configuring TLS is something Postfix specific. You are free to edit most parts of the Postfix configuration (only the after queue filter and reinjection port are required for CipherMail). In the default Postfix main config (main.cf) the TLS config for the SMTP daemon (smtpd\_tls) are commented out (using #). You can remove the comments and place the certificate and key pem on the file system and restart Postfix. An easy way to test the TLS connection on the command line is: openssl s\_client -connect 192.168.88.110:25 -starttls smtp where 192.168.88.110 is the IP of the SMTP server Kind regards, Martijn Brinkers > **···** > > On 04/11/2017 12:58 PM, m.erdmann(a)utwente.nl wrote: > > > I read in the manual that changing the TLS configuration for the SMTP > > server through the GUI is available only in the 'Enterprise' > > version, > > > > We've installed a third-party (Digicert) certificate for the Web > > interface. Would it be possible to modify the MTA config file to use > > this Web certificate for SMTP TLS as well? > > > > It now points to a self-signed certificate I assume: > > > > # server side TLS configuration smtpd\_tls\_cert\_file = > > /etc/postfix/tls.pem smtpd\_tls\_key\_file = $smtpd\_tls\_cert\_file > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and > secure webmail pull. > > > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)** > > > > Easy to use server-side email encryption for automatic encryption and digital signing of email. > > Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail) ---
**Author:** ![Dino\_Edwards](https://avatars.discourse-cdn.com/v4/letter/d/6a8cbe/32.png) [@Dino\_Edwards](https://community.ciphermail.com/u/Dino_Edwards)\ **Post date:** [April 11, 2017, 11:11am UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539/3 "2017-04-11T11:11:28Z")
I don't see why not. We do the same thing. Just modify your main.cf with your digicert certificate info. > **···** > > -----Original Message----- > From: m.erdmann(a)utwente.nl [m.erdmann(a)utwente.nl] > Received: Tuesday, 11 Apr 2017, 6:58AM > To: users(a)lists.djigzo.com [users(a)lists.djigzo.com] > Subject: Using the Web GUI certificate for SMTP TLS, changing MTA config file > > I read in the manual that changing the TLS configuration for the SMTP server through the GUI is available only in the 'Enterprise' version, > > We've installed a third-party (Digicert) certificate for the Web interface. > Would it be possible to modify the MTA config file to use this Web certificate for SMTP TLS as well? > > It now points to a self-signed certificate I assume: > >   # server side TLS configuration >   smtpd\_tls\_cert\_file = /etc/postfix/tls.pem >   smtpd\_tls\_key\_file = $smtpd\_tls\_cert\_file > > Regards, > > Michel Erdmann > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > Users mailing list > Users(a)lists.djigzo.com > [https://lists.djigzo.com/lists/listinfo/users](https://lists.djigzo.com/lists/listinfo/users) ---
**Author:** ![m.erdmann](https://avatars.discourse-cdn.com/v4/letter/m/b9bd4f/32.png) [@m.erdmann](https://community.ciphermail.com/u/m.erdmann)\ **Post date:** [April 11, 2017, 1:47pm UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539/4 "2017-04-11T13:47:18Z")
Thanks Dino en Martijn, got the Digicert in place now for SMTP TLS. Met vriendelijke groet / Regards, Michel Erdmann > **···** > > -----Original Message----- > From: Martijn Brinkers [mailto:martijn(a)[ciphermail.com](http://ciphermail.com)] > Sent: Tuesday, April 11, 2017 13:08 > To: users(a)lists.djigzo.com > Cc: Erdmann, M. (LISA) \ > Subject: Re: Using the Web GUI certificate for SMTP TLS, changing MTA config file > > On 04/11/2017 12:58 PM, m.erdmann(a)utwente.nl wrote: > > > I read in the manual that changing the TLS configuration for the SMTP > > server through the GUI is available only in the 'Enterprise' > > version, > > > > We've installed a third-party (Digicert) certificate for the Web > > interface. Would it be possible to modify the MTA config file to use > > this Web certificate for SMTP TLS as well? > > > > It now points to a self-signed certificate I assume: > > > > # server side TLS configuration smtpd\_tls\_cert\_file = > > /etc/postfix/tls.pem smtpd\_tls\_key\_file = $smtpd\_tls\_cert\_file > > CipherMail gateway uses Postfix for the MTA part so configuring TLS is something Postfix specific. You are free to edit most parts of the Postfix configuration (only the after queue filter and reinjection port are required for CipherMail). > > In the default Postfix main config (main.cf) the TLS config for the SMTP daemon (smtpd\_tls) are commented out (using #). You can remove the comments and place the certificate and key pem on the file system and restart Postfix. > > An easy way to test the TLS connection on the command line is: > > openssl s\_client -connect 192.168.88.110:25 -starttls smtp > > where 192.168.88.110 is the IP of the SMTP server > > Kind regards, > > Martijn Brinkers > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and secure webmail pull. > > > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)** > > > > Easy to use server-side email encryption for automatic encryption and digital signing of email. > > Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail) ---
**Author:** ![Dino\_Edwards](https://avatars.discourse-cdn.com/v4/letter/d/6a8cbe/32.png) [@Dino\_Edwards](https://community.ciphermail.com/u/Dino_Edwards)\ **Post date:** [April 11, 2017, 3:05pm UTC](https://community.ciphermail.com/t/using-the-web-gui-certificate-for-smtp-tls-changing-mta-config-file/539/5 "2017-04-11T15:05:12Z")
You can also test smtp TLS from this website: [http://www.checktls.com/perl/live/TestReceiver.pl](http://www.checktls.com/perl/live/TestReceiver.pl) > **···** > > -----Original Message----- > From: users-bounces(a)lists.djigzo.com [mailto:users-bounces(a)[lists.djigzo.com](http://lists.djigzo.com)] On Behalf Of m.erdmann(a)utwente.nl > Sent: Tuesday, April 11, 2017 9:47 AM > To: users(a)lists.djigzo.com > Subject: Re: Using the Web GUI certificate for SMTP TLS, changing MTA config file > > Thanks Dino en Martijn, got the Digicert in place now for SMTP TLS. > > Met vriendelijke groet / Regards, > > Michel Erdmann > > -----Original Message----- > From: Martijn Brinkers [mailto:martijn(a)[ciphermail.com](http://ciphermail.com)] > Sent: Tuesday, April 11, 2017 13:08 > To: users(a)lists.djigzo.com > Cc: Erdmann, M. (LISA) \ > Subject: Re: Using the Web GUI certificate for SMTP TLS, changing MTA config file > > On 04/11/2017 12:58 PM, m.erdmann(a)utwente.nl wrote: > > > I read in the manual that changing the TLS configuration for the SMTP > > server through the GUI is available only in the 'Enterprise' > > version, > > > > We've installed a third-party (Digicert) certificate for the Web > > interface. Would it be possible to modify the MTA config file to use > > this Web certificate for SMTP TLS as well? > > > > It now points to a self-signed certificate I assume: > > > > # server side TLS configuration smtpd\_tls\_cert\_file = > > /etc/postfix/tls.pem smtpd\_tls\_key\_file = $smtpd\_tls\_cert\_file > > CipherMail gateway uses Postfix for the MTA part so configuring TLS is something Postfix specific. You are free to edit most parts of the Postfix configuration (only the after queue filter and reinjection port are required for CipherMail). > > In the default Postfix main config (main.cf) the TLS config for the SMTP daemon (smtpd\_tls) are commented out (using #). You can remove the comments and place the certificate and key pem on the file system and restart Postfix. > > An easy way to test the TLS connection on the command line is: > > openssl s\_client -connect 192.168.88.110:25 -starttls smtp > > where 192.168.88.110 is the IP of the SMTP server > > Kind regards, > > Martijn Brinkers > > -- > CipherMail email encryption > > Email encryption with support for S/MIME, OpenPGP, PDF encryption and secure webmail pull. > > > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)** > > > > Easy to use server-side email encryption for automatic encryption and digital signing of email. > > Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail) > \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ > Users mailing list > Users(a)lists.djigzo.com > [https://lists.djigzo.com/lists/listinfo/users](https://lists.djigzo.com/lists/listinfo/users)