SSL certificate for hMail server

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
DZeD
New user
New user
Posts: 1
Joined: 2019-06-08 06:22

SSL certificate for hMail server

Post by DZeD » 2019-06-08 07:04

hMail ver 5.6.7-B2425
I am having trouble to install my SSL certfiicate - i have read this post

https://www.hmailserver.com/forum/viewtopic.php?t=22371

I created the private key and CSR using this information
https://knowledge.digicert.com/generali ... O1678.html

I purchased the certificate via RapidSSL and received
ServerCertificate.cer
CACertificate-ROOT-2.cer
CACertificate-INTERMEDIATE-1.cer

I am a little lost regarding the next steps to get this working - any guidance would be appreciated

Darren

User avatar
Dravion
Senior user
Senior user
Posts: 1334
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: SSL certificate for hMail server

Post by Dravion » 2019-06-08 10:43

DZeD wrote:
2019-06-08 07:04
I purchased the certificate via RapidSSL and received
ServerCertificate.cer
CACertificate-ROOT-2.cer
CACertificate-INTERMEDIATE-1.cer

I am a little lost regarding the next steps to get this working - any guidance would be appreciated

Darren
The only interresting file for hMailServer is ServerCertificate.cer but here where the Problems starts.

CER files are Microsoft crap which only works with Software using the Microsoft Windows SSL System but hMailServer (and most programs dont use the Windows SSL-System and relying on OpenSSL.
To makes things even more complicated, *.cer files
can be formatted as PKCS7 (Microsoft properitary)
and RSA x509 Format. The last format version can be used by hMailServer while the first format not and must be converted in X509 *.crt file format.

If you converted your ServerCertificate.cer to a ServerCertificate.crt file (X509 base64) you need to get your private Key file which was created as part of the CSR step. I hope you did not delete your Private key file because without it your purchased SSL-Certificate is complete useless.
64-Bit builds of hMailserver

hMailServer-5.6.+ (HCD) https://github.com/hMailServer-ComDevs/hmailserver
hMailServer-5.6.+ (LTS) https://github.com/Dravion/hMailServer/releases

User avatar
mattg
Moderator
Moderator
Posts: 19810
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: SSL certificate for hMail server

Post by mattg » 2019-06-09 01:43

DZeD wrote:
2019-06-08 07:04
I am having trouble to install my SSL certfiicate - i have read this post
Perhaps you can detail WHAT trouble you are having so that we don't need to guess...

'Trouble getting this working' means what? That you don't know which files to use, OR that your smart phone rejects the certificates as untrusted OR that you have failed some online cert test OR
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply