Mail server encryption authentication in SendMail

SendMail can achieve normal send mail, if only simple build will appear security risks, such as we installed in the server Wireshark by grasping the packet can know the user and password.

[Root@localhost server]# Yum Install Wireshark–y

[Root@localhost ~]# tshark-ni eth0-r "Tcp.port eq 110"

There are two ways to make sure that you send e-mail securely

A Encryption B. Authentication

PKI mechanism

1. Modify the relevant path of CA file;

[Root@mail ~]# vim/etc/pki/tls/openssl.cnf

Di r=/etc/pki/ca

CountryName = Optional

Stateorprovincename = Optional

OrganizationName = Optional

2 Fill in the application certificate can be directly using the default value, you can make the following changes to [Req_distinguished_name]:

3. Generate the private key, and modify the private key permissions

[Root@localhost ca]# pwd

/etc/pki/ca

[Root@localhost ca]# mkdir CRL certs newcerts

[Root@localhost ca]# Touch Index.txt serial

[Root@localhost ca]# echo ">serial"

[Root@localhost ca]# OpenSSL Genrsa 1024>private/cakey.pem

[Root@localhost ca]# CD private/

[Root@localhost private]# LL

Total 4

-rw-r--r--1 root root 887 11-13 19:43 Cakey.pem

[Root@localhost ca]# chmod private/*