Kerio Connectengine starts (immediately or after restart) and runs as a service. Click Finishto complete the installation. Follow the steps in the installation wizard. Kerio Connectmust be installed under the user with administration rights to the system. It will cost you about 15 minutes and you probably will never have to worry about it again. Download the Kerio Connectinstallation file. If you’re still running an unsecured mail server, now is the time to change that. If the certificate is close to expiring, it will be renewed automatically, otherwise it will be kept until the next run. You may want to put this in a cronjob to run every 30 days or so. letsencrypt-auto certonly -keep-until-expiring -d .at Now open the admin panel, select Configuration > SSL Certificates and see your certificate appear. Ln -s /etc/letsencrypt/live/.at/privkey.pem /opt/kerio/mailserver/sslcert/mail.key ln -s /etc/letsencrypt/live/.at/fullchain.pem /opt/kerio/mailserver/sslcert/mail.crt To make renewal easy, just link the created certificates to the appropriate folder inside the Kerio Connect hierarchy. This only needs to be done once.Ĭongratulations, you now have a valid SSL certificate on your server. If you’re running this the first time, you’ll need to enter your email address for emergency usage like revoking a certificate. If you want to renew the certificates automatically, you should think about changing the ports permanently./letsencrypt-auto certonly -standalone -d .at It won’t work without them disabled or running on non-standard ports. Turn off the HTTP and HTTPS services in the admin panel. letsencrypt-auto -help Create the Certificate Install Let’s Encrypt git clone /opt/letsencrypt The instance is running on Ubuntu Linux 14.04 LTS and performed flawless so far. Let’s Encrypt certificates expire every 90 days, so that’s just not an option for a lazy (read: productive, smart) system administrator. The software documentation advises you to copy and paste the certificate information via their admin web interface. As Let’s Encrypt is probably the best thing happening to the internet for the last decade or two, I wanted to use the certificates with a Kerio Connect installation at a customer.
0 Comments
Leave a Reply. |