This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[9.100-16] HOW TO: POP3S Initial Configuration

Hi All

I am trying to configure the pop3s server for a gmx.us account. Initially I've noticed the following on my pop3 log

2013:05:14-15:36:15 ***** pop3proxy[28335]: SSL Error: 0x1408a0c1d (error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher)
2013:05:14-15:36:24 *****  pop3proxy[28348]: Accepted client connection from 10.242.5.1 for 212.227.17.171 (GMX Servers server_id 6)

This is because the relevant TLS certificate has not been uploaded to UTM. I have upload the certificate to the UTM but I am not able to select it as a valid certificate(I've export it via my browser as *.cer). My understanding is that the Certificate should include the private key as well in order to act as a MiM.

How do I get this from gmx.us domain?

Thanks

This thread was automatically locked due to age.

Parents

0 wingman over 11 years ago
Hi Dominic

Which is the certificate you need to upload? Is it just the public certificate of the server(for example Gmail POP3-over-SSL server presents a server certificate)? (If you upload the *.pem certificate you can't select it under pop3 proxy) and you can't upload PKCS#13 as you don't have the private key

The knowledge base doesn't provide much info regarding the TLS certificate

In WebAdmin | Email Protection | POP3 go to the 'Advanced' section.
Select an appropriate TLS certificate.
Apply the certificate.

It would be useful to state where to upload the certificate to as part of the knowledge base? (You should upload the certificate under: Webserver Protection>Certificate Management)

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 dschmidl over 11 years ago in reply to wingman

Thanks Wingman, we will update the KBA.

You can simply create your own certificate, upload an official one or use the WebAdmin certificate.

Regards
Dominic
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dschmidl over 11 years ago in reply to wingman

Thanks Wingman, we will update the KBA.

You can simply create your own certificate, upload an official one or use the WebAdmin certificate.

Regards
Dominic
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data