how to TLS for sentora mail with letsencrypt

[shaylami]

Hi All,
short guide how to set tls for you mail server
Step 1:
go to --> /etc/dovecot/conf.d/10-ssl.conf
and edit the rows:
ssl_cert = </etc/letsencrypt/live/mail.domain.com/fullchain.pem
ssl_key = </etc/letsencrypt/live/mail.domain.com/privkey.pem

Step 2:
go to --> /etc/postfix/main.cf
and edit the rows:
smtpd_tls_cert_file=/etc/letsencrypt/live/mail.domain.com/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/mail.domain.com/privkey.pem
smtpd_use_tls=yes

step 3 :
restart mail + apache2 services

now check your mil account via web http://checktls.com/perl/TestReceiver.pl?ASSURETLS

enjoy hope you like that

[TGates]

Thanks for the contribution!

FYI:
I have step 2 certificate files as:

Code:

# tls config
smtpd_use_tls = yes
smtpd_tls_security_level = may
smtp_tls_note_starttls_offer = yes
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
smtpd_tls_key_file = /etc/letsencrypt/live/mail.domain.com/privkey.pem
smtpd_tls_cert_file = /etc/letsencrypt/live/mail.domain.com/cert.pem
smtpd_tls_CAfile = /etc/letsencrypt/live/mail.domain.com/chain.pem

Moved to proper forum section.