moparisthebest/davmail
1
0
Fork 0
mirror of https://github.com/moparisthebest/davmail synced 2024-12-14 03:32:22 -05:00
Code Issues Releases Wiki Activity

Doc: update ssl server certificate doc

Browse Source 
git-svn-id: http://svn.code.sf.net/p/davmail/code/trunk@1500 3d1905a2-6b24-0410-a738-b14d5a86fcbd
This commit is contained in:
mguessan 2010-10-08 09:31:15 +00:00
parent 6a9ea37f60
commit 2b9156a42d
1 changed files with 33 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

51
src/site/xdoc/sslsetup.xml
View File

@ -11,30 +11,45 @@
<body> <body>
<section name="SSL setup"> <section name="SSL setup">
<p>SSL is not necessary when DavMail is used in workstation mode, as communication between clients and <subsection name="Server keystore (Client to DavMail)">
DavMail remain local. However, in server (shared) mode e.g. with a smartphone connecting to DavMail over <p>SSL is not necessary when DavMail is used in workstation mode, as communication between clients and
the internet, you should make sure encryption is enabled. DavMail remain local. However, in server (shared) mode e.g. with a smartphone connecting to DavMail
</p> over the internet, you should make sure encryption is enabled.
</p>
<p>The simplest way to secure communication between mail/calendar clients and DavMail is to create a <p>The simplest way to secure communication between mail/calendar clients and DavMail is to create a
self signed certificate: self signed certificate:
</p> </p>
<source> <source>
<![CDATA[keytool -genkey -keyalg rsa -keysize 2048 -storepass password -keystore davmail.p12 -storetype pkcs12 -validity 3650 -dname cn=davmailhostname.company.com,ou=davmail,o=sf,o=net]]> keytool -genkey -keyalg rsa -keysize 2048 -storepass password -keystore davmail.p12 -storetype
</source> pkcs12 -validity 3650 -dname cn=davmailhostname.company.com,ou=davmail,o=sf,o=net
</source>
<p>Then add this keystore to DavMail settings: <p>Then add this keystore to DavMail settings:
</p> </p>
<source><![CDATA[ <source><![CDATA[
davmail.ssl.keystoreType=PKCS12 davmail.ssl.keystoreType=PKCS12
davmail.ssl.keyPass=password davmail.ssl.keyPass=password
davmail.ssl.keystoreFile=davmail.p12 davmail.ssl.keystoreFile=davmail.p12
davmail.ssl.keystorePass=password]]> davmail.ssl.keystorePass=password]]>
</source> </source>
<p>Restart DavMail, all DavMail listeners will switch to secure mode. You will also need to enable SSL in <p>Restart DavMail, all DavMail listeners will switch to secure mode. You will also need to enable SSL
client applications and manually accept the certificate as it's not signed by a trusted in
Certification Authority. client applications and manually accept the certificate as it's not signed by a trusted
</p> Certification Authority.
</p>
</subsection>
<subsection name="DavMail to Exchange">
<p>In most cases, using https in OWA url is enough to secure communication between DavMail and Exchange.
However, with Exchange servers setup to require mutual authentication, you will have to register
client certificate in DavMail settings, either through PKCS11 (smartcard) or file certificate:
</p>
<source><![CDATA[
davmail.ssl.clientKeystoreType=PKCS12
davmail.ssl.clientKeystoreFile=client.p12
davmail.ssl.clientKeystorePass=password]]>
</source>
</subsection>
</section> </section>
</body> </body>
</document> </document>