PDA

View Full Version : Encrypted Connections for IMAP and SMTP

tboorman
09/02/2007, 18:38
Hi Brian,

Are there any plans to use a genuine SSL certificate for encrypted IMAP and SMTP connections please?
Realist
09/02/2007, 18:59
Well I just installed a ssl cert for aadsl24.co.uk
tboorman
09/02/2007, 19:06
I noticed one for pluto.adsl24.co.uk had been installed for Webmail and cPanel, but if I use pluto.adsl24.co.uk as the address of the incoming and outgoing email server, the email clients I have tried give a warning about the SSL certificate.
Realist
09/02/2007, 19:32
Because that cert is only for cpanel logins only.
tboorman
09/02/2007, 20:25
Has a different one been installed for email then?
Realist
09/02/2007, 22:15
Only one under the adsl24.co.uk domain.
tboorman
09/02/2007, 22:19
I've tried using adsl24.co.uk as the address of the incoming and outgoing mail server, but I still get a warning about the SSL certificate. Is this the correct address please?
Realist
09/02/2007, 22:22
yes but I will get the techs to re-install the cert just in case, but its for adsl24.co.uk.
tboorman
09/02/2007, 22:29
Thanks Brian, because I get the following Internet Security Warning in Outlook:

The server you are connected to is using a security certificate that could not be verified.

A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
Realist
09/02/2007, 22:32
Yes but if you look at the cert you will see its valid.
Realist
09/02/2007, 22:35
If you use: https://pluto.adsl24.co.uk:2083 for cpanel logins and https://pluto.adsl24.co.uk:2096 for webmail you will see the cert works.

Regards.
cliff
09/02/2007, 22:46
I have been doing this for a while, but instead of pluto i use my username...does the same thing https...etc
But when you use Opera.... The server's name "username.adsl24.co.uk" does not match the certificate's name "pluto.adsl24.co.uk". Somebody may be trying to eavesdrop on you. ( You can still reach the same page)
I have now changed to the addresses provided by Brian...the Pluto version
Thanks for the information
Cliff
tboorman
10/02/2007, 09:25
The new certificate is fine for Webmail and cPanel, it's the one for IMAP/POP3/SMTP that the email clients I've tried complain about.
Realist
10/02/2007, 10:20
Complaints, complaints and after I sent you all that beer :)
Realist
10/02/2007, 10:51
Ok try now by doing the following in Outlook Express:

Tools
Accounts
Pick your Email Account
Properties
Advanced
Tick the box "This server requires a secure connection (SSL) the above port number will change from "110" to "995".

The cert should then work.

Let me know.
tboorman
10/02/2007, 12:06
Complaints, complaints and after I sent you all that beer :)

Must have got nicked on the way, because I haven't seen any!
tboorman
10/02/2007, 12:10
I'm using Outlook 2003, and I still get an Internet Security Warning.
surfer_chick
10/02/2007, 12:18
Try using a proper client such as Thunderbird :p ;)
tboorman
10/02/2007, 12:25
The email client I use on my mobile phone (Profimail) also gives a warning about the certificate.
Realist
10/02/2007, 12:45
I tested it with Firefox (adsl24) and that works fine.
tboorman
10/02/2007, 13:04
Profimail gives the warning "This site has an untrusted certificate", and when I look at the certificate details it shows:

Subject:
pluto.adsl24.co.ukUnknown

Issuer:
pluto.adsl24.co.ukUnknown
Realist
10/02/2007, 13:14
Owe well :)

Will look into it ASAP over the weekend Tim.

Regards.
tboorman
10/02/2007, 13:37
Thanks Brian, it looks like that is not a genuine certificate.
cliff
10/02/2007, 16:30
ADSL24 wrote:
Tick the box "This server requires a secure connection (SSL) the above port number will change from "110" to "995".

IMAP uses port 143, POP 110

I tried the above, but received the following display:

There may be a problem with the mail server or network. Check the settings for account "ADSL24 IMAP Account" or try again.

The server error encountered was: Mail was unable to verify the identity of this server, which has a certificate issued to "pluto.adsl24.co.uk". The error was:

The root certificate for this server could not be verified.

You might be connecting to a computer that is pretending to be "mail.username.adsl24.co.uk", and putting your confidential information at risk. Would you like to continue anyway?


Did not receive any mail when activated....So changed to the above, decided to stay with old settings. Mail must have re-synchronized, now mail seems to be ok.

I never used SSL with my Nildram account...These are the settings from their web site.

POP3
Server: pop3.gotadsl.co.uk
Port: 110
SMTP
Server: smtp.gotadsl.co.uk
Port: 25
No authentication required, non SSL connection.
Realist
10/02/2007, 17:55
Well Im using SSL via port 995 and I dont receive any such messages?
tboorman
10/02/2007, 18:03
It appears that the certificate for Webmail and cPanel has been changed - it's now one that's been issued to adsl24.co.uk rather than pluto.adsl24.co.uk.
Realist
10/02/2007, 18:29
That looks to be my fault. When I first installed the root cert and then installed the adsl24 cert I overwrote the first one ;)

Will fix it asap.
tboorman
13/02/2007, 18:50
Hi Brian,

Did you get anywhere with sorting out the certificate for IMAP/POP3/SMTP?
Realist
13/02/2007, 18:58
No not as yet.

Will look at it this week.

Regards,