3 ms·
This article motivated me to at least create a self-signed certificate for my server.
by abricot 11y ago
This article motivated me to at least create a self-signed certificate for my server.
- Tepix 11y agoWhy not get a free real certificate form letsencrypt or startssl?
- avian 11y agoBecause as the article says, it is as good as a CA-signed one, is easier to make and can have a long validity period. StartSSL limits you to one year and Let's Encrypt is really focused on certificates for HTTPS (their ACME protocol AFAIK requires a handshake through HTTPS).
- Natanael_L 11y agoOnce you have LE certs, you can reuse them for anything on the same domain AFAICT. Might need some configuration changes though to get a cert issued for something like a dedicated email server subdomain.
- cm2187 11y agoto be honest a commercial SSL certificate costs the price of a coffee per year https://cheapsslsecurity.com/ https://cheapsslsecurity.com/
- talideon 11y agoOne thing to keep in mind if you use Thunderbird is that their certificate verification library (Mozilla::PKIX) really, really hates self-signed certificates. So, if you're using a self-signed cert on your mailserver's submission port or to encrypt IMAP traffic, Thunderbird will simply fail to work. Unfortunately, I know of no way around this. I just gave up and started using Claws in the meantime.
- abricot 11y agoI only ever use my server to forward emails for certain addresses. No clients ever contact it.