Depending on the speed of your server CPU<\/strong>, this will take a minute.\u00a0After the generation process is complete<\/strong>, you can\u00a0enable TLS-encryption for both Postfix and Dovecot<\/strong>. For Postfix, add the following lines to\u00a0\/etc\/postfix\/main.cf<\/code>:<\/p>\n

smtpd_tls_cert_file = \/etc\/dovecot\/private\/mykey.pem\r\nsmtpd_tls_key_file = \/etc\/dovecot\/private\/mycert.pem\r\nsmtpd_use_tls = yes\r\n<\/code><\/pre>\n
For Dovecot, open<\/strong>\u00a0\/etc\/dovecot\/conf.d\/10-ssl.conf<\/code>\u00a0and edit the\u00a0SSL-related<\/strong>\u00a0lines:<\/p>\n
ssl = yes\r\nssl_key = \/etc\/dovecot\/private\/mykey.pem\r\nssl_cert = \/etc\/dovecot\/private\/mycert.pem\r\n<\/code><\/pre>\n
Once again, restart both services:<\/strong><\/p>\n
sudo service postfix restart\r\nsudo service dovecot restart\r\n<\/code><\/pre>\n
To verify that the setup is correct<\/strong>, you can test that the\u00a0mailserver allows encrypted connections<\/strong>\u00a0with the following command:<\/p>\n
openssl s_client -starttls smtp -crlf -connect youripaddressoryourdomain:25\r\n<\/code><\/pre>\n
If the\u00a0answer contains both certificate<\/strong>\u00a0and connection information,\u00a0then everything is working properly.<\/strong>\u00a0The last step of\u00a0this tutorial is the configuration<\/strong>\u00a0of\u00a0Sieve<\/strong>. It’s pretty simple, open\u00a0\/etc\/dovecot\/conf.d\/15-lda.conf<\/code>\u00a0with your favorite text editor and edit the following line:<\/p>\n
mail_plugins = $mail_plugins sieve\r\n<\/code><\/pre>\n
A final restart of Dovecot finishes your setup:<\/strong><\/p>\n
sudo service dovecot restart\r\n<\/code><\/pre>\n
At this point, you may want to set up a another user since using root for sending mails is considered arrogant. Simply run:<\/strong><\/p>\n
 useradd -m yourusername\r\n passwd yourusername\r\n<\/code><\/pre>\n
Now you can log into your server as your freshly created user over a secure connection<\/strong>, send and receive mail over secure connections, and\u00a0sort your mails<\/strong>\u00a0with sieve over a secure connection.<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","manualknowledgebasecat":[233,244],"manual_kb_tag":[306,307,308],"_links":{"self":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2475"}],"collection":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/comments?post=2475"}],"version-history":[{"count":1,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2475\/revisions"}],"predecessor-version":[{"id":2476,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2475\/revisions\/2476"}],"wp:attachment":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/media?parent=2475"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manualknowledgebasecat?post=2475"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb_tag?post=2475"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}