IMAP / POP3 / SMTP via SSL

[chirpy]

r2d3 posted the relevant files for exim in their post above.

[flash7]

r2d3 posted the relevant files for exim in their post above.

I have tried to change that file but it does not work.

I receive a warning message only with sending email over ssl (port 465).
POP3 (995) work great without any warning message.

[flash7]

Fixed!
Restarted Exim, IMAP, cPanel

[budway]

Just to resume howto due SSL over exim

SMTP is 465
POP3 is 995

To install

insert your RSA KEY and Cert on the file above:
/etc/exim.key

insert your RSA Key and Cert to the file above:
/etc/exim.crt

(I would advise once you get the cert running ok make a backup cp /etc/exim.key /etc/exim.key-bk and of the crt file also)

service exim restart
/scripts/rest*exim
/scripts/restart*cppop

service cpanel restart
(Mayble required)


If you have Followed the EXIM/SSL install above AND YOU are Getting ERRORS ie. above in your Outlook Tweak/Fix Anti Relayd:
0x800CCC65
0x800CCC7F
0x800CCC0F

PS: Known BUG #4776 with AntiRelayd (FIX/WorkAround)
Edit the file /usr/sbin/antirelayd
On line 101
This line
cpanelpop|cppop|pop3d|imap|imapd

Change it to look like the above "a Exim Restart may be needed"
cpanelpop|cppop|pop3d|imap|imapd|imapd-ssl|pop3d-ssl

[flash7]

The problem is when cPanel upgrade Exim, the key and crt are overwritten.

Perhaps the best way to prevent this:

chattr +i /etc/exim.key
chattr +i /etc/exim.crt

[budway]

There is an issue with Anti Relayd and SSL true EXIM / SMTP.

This errors can only self-tell when you send a e-mail using Exim SSL (You can't send e-mail).


I have posted on my previous message a fix and the bug # that was reported.

[patronus]

Just to resume howto due SSL over exim

SMTP is 465
POP3 is 995

To install

insert your RSA KEY and Cert on the file above:
/etc/exim.key

insert your RSA Key and Cert to the file above:
/etc/exim.crt

(I would advise once you get the cert running ok make a backup cp /etc/exim.key /etc/exim.key-bk and of the crt file also)

service exim restart
/scripts/restart_cppop

service cpanel restart
(Mayble required)


If you have Followed the EXIM/SSL install above AND YOU are Getting ERRORS ie. above in your Outlook Tweak/Fix Anti Relayd:
0x800CCC65
0x800CCC7F
0x800CCC0F

PS: Known BUG #4776 with AntiRelayd (FIX/WorkAround)
Edit the file /usr/sbin/antirelayd
On line 101
This line
cpanelpop|cppop|pop3d|imap|imapd

Change it to look like the above "a Exim Restart may be needed"
cpanelpop|cppop|pop3d|imap|imapd|impad-ssl|pop3d-ssl

Budway:

Thanks much for the post!

I've been trying to get my hosting provider to fix this bug. Hopefully, in view of your post, they'll get around to fixing it soon.


By the way...
Is the reference to "impad-ssl" a typo? If so, should it be "imapd-ssl"?
And should a reference to "imap-ssl" (no "d") be included?

Sorry if the answers to my questions should be obvious. I'm completely new to this stuff.

[budway]

Yes that was a typo I already fixed it. (Thanks I didn't noticed)

No the edit should be done like it is showed. No (imap only how is showed)

[yeahoi]

Hi,

i still have the same problems. Until this morning, sending emails via 465 was working FINE! Now, i cannot send emails via 465 (SMTP).

I have:
WHM 11.1.0 cPanel 11.2-C11519
REDHAT Enterprise 3 i686 - WHM X v3.1.0


I made the changes mentioned above. I didn't knew what ceritificates and keys to copy to exim.crt and exim.key. We have a SSL certificate for the domain name server1.domain-here.com .... First i copied the CRT and KEY from our domain name certificate to exim.key and exim.crt, did a full reboot and no results

Then i generated again the key and cert for localhost (self-signed), copied this to exim.crt and exim.key and still no results....

any ideas?

It is such a pity as it was working just fine up to a couple of hours ago. The last upgrade of Cpanel might have screwed it

[edesignway]

Login to WHM look under "Service Configuration" and select the option called "Manage Service Certificates"

Next to Courier (IMAP) Mail Server click "Install new Certificate" Doing that will also update Courier (POP3) Mail Server, cPanel/WHM/Webmail Service, and Exim (SMTP) Server all at once.

[flash7]

Well, on cPanel 11 I get (again) error of WHM/cPanel (hostname) certificate.
Can someone explain /var/cpanel/ssl/cpanel

1) cpanel.pem
2) mycpanel.cabundle
3) mycpanel.pem

Thank you

[flash7]

ah! fixed thanks to this tutorial:
http://forums.cpanel.net/showthread.php?t=63178