DetlevCM

Certifcate Service on Home Server

Recommended Posts

OK, so I installed hmailserver on my Windows Home Server - I can receive emails and sadly only send them relaying them via my ISP - better than nothing I suppose.

However, right now I lack encryption - so, how do I get it?

I need a certificate - OK.

But how do I get one from say cacert? I don't want to delete the current certificate it uses for the website out of fear of messing it up. Alternatively, can I use the one it has for email? I think not, right?

So have anybody got any tips on how to get one?

Please some that one understands being a geek but NOT being a sys-admin, as I am not.

On that note, can I install the certificate service or will that mess anything up?

Thanks :)

Share this post


Link to post
Share on other sites

Hmm, I've never heard of hmailserver, so did some quick reading. It does sound like there are several ways to get SSL up and running. You can probably create your own certificate, but I did find a page where they used the existing SSL cert that was installed on IIS already with some wrangling.

Also, you should be able to use the certificate service without problem (although, I'm not 100% sure).

Here are a few links:

http://www.hmailserver.com/documentation/latest/?page=reference_sslcertificates

http://www.hmailserver.com/forum/viewtopic.php?t=3139

http://www.hmailserver.com/forum/viewtopic.php?f=10&t=13206&start=0

Share this post


Link to post
Share on other sites

Hmm, I've never heard of hmailserver, so did some quick reading. It does sound like there are several ways to get SSL up and running. You can probably create your own certificate, but I did find a page where they used the existing SSL cert that was installed on IIS already with some wrangling.

Also, you should be able to use the certificate service without problem (although, I'm not 100% sure).

Here are a few links:

http://www.hmailserver.com/documentation/latest/?page=reference_sslcertificates

http://www.hmailserver.com/forum/viewtopic.php?t=3139

http://www.hmailserver.com/forum/viewtopic.php?f=10&t=13206&start=0

Thanks for a first reply:

Link 1: - This one I found too, I need the appropriate files for it to work, no? Right now I don't know how to get them, neither how they look :D so that would be a bit difficult...

Link 2: From what I understand in that thread an application is used to redirect ports?

Further down someone offers some precompiled stuff (OpenSSL) to use with Stunnel - still tunneling...

Nothing about using and existing certificate I think...

Link 3: -> this is about an existing certificate - but it seems to require OpenSSL? It doesn't sound too clear to me :(

But it's possibly what I want...

The certificate service returns a warning when I try to create it...

On that note though - the certificate for the windows homes server site comes from the Microsoft service that offers you the homeserver domain, is it not? so if I break the certificate, would I not get a new one?

Share this post


Link to post
Share on other sites

Yeah, it's probably best not to mess with any certificates that already exist.

I think the directions provided on the hmailserver site (first link) are probably your best bet. Also, unless you want to purchase a certificate, you probably just want to self-sign one.

Basically, it looks like you need to download OpenSSL (http://www.slproweb.com/products/Win32OpenSSL.html) to generate the certificate. I've never used it to create a certificate, so I can't help you there. However, once you've created the cert, it sounds like the steps are pretty straightforward to add the certificate to hmailserver using it's admin interface.

Share this post


Link to post
Share on other sites

Yeah, it's probably best not to mess with any certificates that already exist.

I think the directions provided on the hmailserver site (first link) are probably your best bet. Also, unless you want to purchase a certificate, you probably just want to self-sign one.

Basically, it looks like you need to download OpenSSL (http://www.slproweb.com/products/Win32OpenSSL.html) to generate the certificate. I've never used it to create a certificate, so I can't help you there. However, once you've created the cert, it sounds like the steps are pretty straightforward to add the certificate to hmailserver using it's admin interface.

OK, I tried to install OpenSSL on my home server... and well, it doesn't work... it starts and then at the end just crashes... I have no idea why :(

VC++ redistributable is installed....

Worst case I can live without SSL and just send all my forum notifications to it, they are pretty much public anyway, but it would be nice to have a fully functioning mail server at home :(

On another note, I don't have ages to spend on it... there is a BSc final Year proect that needs doing too...

If anybody has any ideas, suggestions, I'd happily hear them, hopefully they can help me :)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now