SSL Certificates

Top  Previous  Next

SpamFilter requires the following certificates to be placed in SpamFilter's root directory when accepting SSL connections via SMTP:

 

root.pem: Certificate Authority (CA) certificate
cert.pem: x.509 certificate, signed by the CA
key.pem: x.509 private key

 

Included with SpamFilter's distribution are sample certificates issued by LogSat Software.  While they are fully functional and allow encrypted communications, they are signed by our internal Certificate Authority (CA). As this CA is not trusted by browsers and mail client software, using them will often cause security warnings in client software.

 
Administrators can purchase SSL certificates from commercial entities like Verisign or Thawte, which will eliminate any security warnings. Administrators can also select to issue their own certificates, using a CA they trust. In these cases, the certificates will have to be converted to .pem format if they are issued in other formats. The OpenSSL utility from www.openssl.org can be used for both of these purposes. Pre-compiled binaries for OpenSSL for Windows can usually be found at www.openssl.org/related/binaries.html.