Re: Enable POP/POP3, POPS/POP3S and Let’s Encrypt SSL

[Jan Kowalsky]

Hi Martin,

Am 27.06.19 um 04:48 schrieb Martin Araujo:

> Could someone please help me how to enable POP/POP3 or POPS/POP3S and how to install a Let’s Encrypt SSL for web, Cyrus, Postfix?

Actually the certificates you define in imapd.conf are valid for both,
imap and pop3.

(here are mine):

tls_server_cert: /etc/letsencrypt/live/exmaple.org/fullchain.pem
tls_server_key: /etc/letsencrypt/live/example.org/privkey.pem
tls_ciphers:
EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA


> I checked:
> https://docs.kolab.org/howtos/secure-kolab-server.html
> but it seems this documentation is outdated or I could not make it work.

What are the problems you run into?

For letsencrypt you can either just use the apache plugin if your
webserver runs inside the same machine or the standalone plugin from
certbot. This should be straight forward.

Best Regards
Jan