Re: [courier-users] Let's encrypt

2016-05-14 Thread Matus UHLAR - fantomas
>On 14/05/16 06:30, SZÉPE Viktor wrote:
>> Let's Encrypt also provides you 3 certs: intermediate, public and
>> private. Just install them (symlink them) as any other certificate.
>> The order is:
>>
>> # cat "$PRIV" "$PUB" "$INT" > "$COURIER_COMBINED"

On 14.05.16 12:32, Mark Constable wrote:
>FWIW I find that only privkey.pem and fullchain.pem are necessary.

maybe because fullchain.pem consists of $PUB and $INT ?

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Windows found: (R)emove, (E)rase, (D)elete

--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] Let's encrypt

2016-05-13 Thread Mark Constable
On 14/05/16 06:30, SZÉPE Viktor wrote:
> Let's Encrypt also provides you 3 certs: intermediate, public and
> private. Just install them (symlink them) as any other certificate.
> The order is:
>
> # cat "$PRIV" "$PUB" "$INT" > "$COURIER_COMBINED"

FWIW I find that only privkey.pem and fullchain.pem are necessary.

I also use a simple shell wrapper around this to manage my LE certs...

https://github.com/lukas2511/letsencrypt.sh.git

as it has no dependencies on perl or python.

--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


Re: [courier-users] Let's encrypt

2016-05-13 Thread SZÉPE Viktor
Good evening!

Let's Encrypt also provides you 3 certs: intermediate, public and private.
Just install them (symlink them) as any other certificate. The order is:

# cat "$PRIV" "$PUB" "$INT" > "$COURIER_COMBINED"

This is my workhorse for that task:
https://github.com/szepeviktor/debian-server-tools/blob/master/security/cert-update.sh

Certbot has serious permission problems: leaves private key with 0644

The other thing is acquiring it.
I am learning these tools, as they give me more control
https://github.com/diafygi/acme-tiny/blob/master/acme_tiny.py
https://github.com/kuba/simp_le
Certbot feels like a bloat-ware. But the support is nice.

All the best!



Idézem/Quoting Jan Müller :

> Hi,
> did anyone succeed in installing letsencrypt certificates for imap and/or
> smtp?
>
> Which guide did you follow?
>
> I did some preliminary googling and this looks not bad:
> https://community.letsencrypt.org/t/configure-courier-imap/3620
>
> Thanks for noting any caveats that might pop up.
>
> Regards!
> Jan Müller



SZÉPE Viktor
-- 
+36-20-4242498  s...@szepe.net  skype: szepe.viktor
Budapest, III. kerület





--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[courier-users] Let's encrypt

2016-05-13 Thread Jan Müller
Hi,
did anyone succeed in installing letsencrypt certificates for imap and/or
smtp?

Which guide did you follow?

I did some preliminary googling and this looks not bad:
https://community.letsencrypt.org/t/configure-courier-imap/3620

Thanks for noting any caveats that might pop up.

Regards!
Jan Müller
--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j___
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users