如何用openssl 建立專屬的 POP3 SSL 憑證!!

[Lan`s]

謝謝，憑證這個部份大致懂了
第二段我的意思是....
如果我想讓webmail只在ssl的模式下作業時，
(1)81port關閉，只開sslport
(2)81port轉向sslport(但是我想讓非ssl的模式終止...)
另外，連結時是不是要改成https://............(還是後面還要加":sslport"成https://..........:sslport呢?)

[Arnor]

[奈米]

[alan35]

[Arnor]

你填的是真實IP還是虛擬IP?
我記得我當時試的時候, 若連的POP3 server 是 192.168.0.2,
我就給CN 設 192.168.0.2 就沒這問題....
不果也只有試這個而已, 其它就沒試過了...
internet 應用你可以用那台server 的 fqdn 和真實IP 試試..
_________________
*若是想問問題的話, 請務必不要塗改任何 IP, 網域資料, 您若不願貼上IP或網域, 請改以電子郵件來詢問. 謝謝您的配合.*
*若是回報疑似軟體的運行或邏輯或資料處理有誤的問題, 小弟很樂意去了解您的情況, 但請務必以最新版來做回報, 如果以郵件詢問, 請參考 http://www.raidenmaild.com/tw/feedback.html 的說明, 最好標題加個 RaidenMAILD 字樣, 才不致會遺漏了您的信唷. 謝謝您的配合^^*
*在版上發文請遵守網路禮儀, 並請持著虛心敘述問題請教他人, 凡發現違反的文, 均一律刪除為優先, 不另行通知喔.
*與使用者教學相長腦力激盪是我輩成就感的來源, 誠心希望您能不吝指教.
*雷電MAILD 知識庫文件 http://www.raidenmaild.com/tw/kb/

素還尊
Team John Long.
Email: arnor@raidenmaild.com
公司網站 http://www.raidenmaild.com/company/

[zxr]

請問,為何我安裝憑證後,在outlook設定帳號使用憑證時,找不到匯入的憑證?

[Arnor]

[zxr]

感謝!!! 已經可以使用這個功能了!
但是現在出現另一個問題,那就是Norton Anti Virus的郵件防護功能沒辦法用了?!
在下裝的是NAV2001版....
裡面只要是設定成POP3 SSL的帳號都無法使用NAV電子郵件防護
請問有何方法解決嗎?

[Arnor]

[zxr]

[zxr]

[Arnor]

caroot.cer 本就要安裝,
表示信任此站台憑證,
裝完後會出現在 ie的root 憑證那邊.
_________________
*若是想問問題的話, 請務必不要塗改任何 IP, 網域資料, 您若不願貼上IP或網域, 請改以電子郵件來詢問. 謝謝您的配合.*
*若是回報疑似軟體的運行或邏輯或資料處理有誤的問題, 小弟很樂意去了解您的情況, 但請務必以最新版來做回報, 如果以郵件詢問, 請參考 http://www.raidenmaild.com/tw/feedback.html 的說明, 最好標題加個 RaidenMAILD 字樣, 才不致會遺漏了您的信唷. 謝謝您的配合^^*
*在版上發文請遵守網路禮儀, 並請持著虛心敘述問題請教他人, 凡發現違反的文, 均一律刪除為優先, 不另行通知喔.
*與使用者教學相長腦力激盪是我輩成就感的來源, 誠心希望您能不吝指教.
*雷電MAILD 知識庫文件 http://www.raidenmaild.com/tw/kb/

素還尊
Team John Long.
Email: arnor@raidenmaild.com
公司網站 http://www.raidenmaild.com/company/

[lyr]

各位大大好,

請問有沒有SSL的設定步驟?有的話可以提供給我嗎?
我真的很笨,看了上面文章有看沒有懂.

加了SSL後,NAV GATE是否要更改呢?因為想用NAV GATE來掃毒.

感激不盡

網路新手,學習中


LYR

[Arnor]

[Arnor]

POP3 SSL, WEBMAIL SSL 都是用同一個憑證, 所以建議用IP 來當CN 值.
文件我也有更新了....還產生不出來的人請看....

cacert.pem - CA root certificate
cert.pem - Site certificate
privkey.pem - Site private key
caroot.cer - CA root certificate for users to import his/her CAPI Store to trust the mail server
certificate.
You can put it on your <RaidenMAILD>\webimages for users to download and import
on his system.
download url sample: http://webmail.yourdomain.com:81/webimages/caroot.cer
You can provide the link in the login.html template.

************************************************************************************
How to build your site certificate with MaildSSLPackage (packed by openssl win32)

download link: http://www.raidenmaild.com/download/MaildSSLPackage.zip

Please follow the steps below carefully. It is easy but need you to pay attention.

PS: All pass phrase for raidenmaild issue is 1234 only!

===================================================================================
STEP1: Execute 1MakeCaRootKey.bat
Enter PEM pass phrase: 1234
Verifying password - Enter PEM pass phrase: 1234

Result: ca.key will be generated.


STEP2: Execute 2MakeCaRootCert.bat
Enter PEM pass phrase: 1234
Country Name (2 letter code) [US]: US
PS: This is COUNTRY field. ex: US - United State, TW - Taiwan...so on.
Nombre del Estado (nombre completo) [Luisiana]: Luisiana
PS: This is STATE field. I don''t know why it shows non-english description.
Locality Name (eg, city) [New York]: Taipei
PS: This is CITY field.
Nombre de la Organizacion (Empresa) [none]: IBM
PS: This is ORGANIZATION field.
Nombre del departamento [none]: R&D
PS: This is DEPARTMENT field.
Common name (eg, TU nombre, website) []: 201.204.140.245
PS: This is COMMON NAME field. You can put website domain name or IP here. I suggest IP.
email@adress.com []: xx@xxx.com
PS: This is EMAIL field. Input your email here.

Result: ca.crt will be generated.


STEP3: Execute 3MakeServerKey.bat
Enter PEM pass phrase: 1234
Verifying password - Enter PEM pass phrase: 1234

Result: server.key will be generated.


STEP4: Execute 4MakeServerReq.bat
Enter PEM pass phrase: 1234

*** Following field must be the same as STEP2 ***

Country Name (2 letter code) [US]: US
PS: This is COUNTRY field. ex: US - United State, TW - Taiwan...so on.
Nombre del Estado (nombre completo) [Luisiana]: Luisiana
PS: This is STATE field. I don''t know why it shows non-english description.
Locality Name (eg, city) [New York]: Taipei
PS: This is CITY field.
Nombre de la Organizacion (Empresa) [none]: IBM
PS: This is ORGANIZATION field.
Nombre del departamento [none]: R&D
PS: This is DEPARTMENT field.
Common name (eg, TU nombre, website) []: 201.204.140.245
PS: This is COMMON NAME field. You can put website domain name or IP here. I suggest IP.
email@adress.com []: xx@xxx.com
PS: This is EMAIL field.

a password []: <== no need, just press [enter] to continue.
bussines name optional []: <== no need, just press [enter] to continue.

Result: server.csr will be generated.


STEP5: Execute 5SignServerCert.bat
Enter PEM pass phrase: 1234
Check that the request matches the signature
Signature ok
The Subjects Distinguished Name is as follows
countryName :PRINTABLE:''US''
stateOrProvinceName :PRINTABLE:''Luisiana''
localityName :PRINTABLE:''Taipei''
organizationName :PRINTABLE:''IBM''
organizationalUnitName:PRINTABLE:''R&D''
commonName :PRINTABLE:''201.204.140.24''
emailAddress :IA5STRING:''xx@xxx.com''
Certificate is to be certified until Feb 6 08:45:35 2004 GMT (365 days)
Sign the certificate? [y/n]: y

1 out of 1 certificate requests certified, commit? [y/n] y
Write out database with 1 new entries
Data Base Updated

Result: server.crt will be generated.
ca.db.index.old will be generated.
ca.db.serial.old will be generated.
ca.db.index will be updated for new cert.
ca.db.serial will be updated for new cert.
<serial>.pem will be generated for new cert ( certificate content ).


STEP6: Execute 6PrepareMaildSSLFiles.bat

Result: necessary files will be copied to \Output directory and rename to
correct filename for Maild usage.
Then you can copy the files in \Output to your <Raidenmaild>\SSL directory.

STEP7: If your user wants to connect to your POP3 SSL or WebMAIL SSL, he must download the caroot.cer
from you first and double click on it to import the ca root certificate to trust your server,
then he will not popup a dialog to warn him while he connects to your SSL servive.


That''s all.
Thanks for your time.

======================================================================================
Author: Arnor
Email: arnor@playstation2.idv.tw




目前是英文的啦, 看不懂的話...就...就...查字典好了......
_________________
*若是想問問題的話, 請務必不要塗改任何 IP, 網域資料, 您若不願貼上IP或網域, 請改以電子郵件來詢問. 謝謝您的配合.*
*若是回報疑似軟體的運行或邏輯或資料處理有誤的問題, 小弟很樂意去了解您的情況, 但請務必以最新版來做回報, 如果以郵件詢問, 請參考 http://www.raidenmaild.com/tw/feedback.html 的說明, 最好標題加個 RaidenMAILD 字樣, 才不致會遺漏了您的信唷. 謝謝您的配合^^*
*在版上發文請遵守網路禮儀, 並請持著虛心敘述問題請教他人, 凡發現違反的文, 均一律刪除為優先, 不另行通知喔.
*與使用者教學相長腦力激盪是我輩成就感的來源, 誠心希望您能不吝指教.
*雷電MAILD 知識庫文件 http://www.raidenmaild.com/tw/kb/

素還尊
Team John Long.
Email: arnor@raidenmaild.com
公司網站 http://www.raidenmaild.com/company/