E-mail, also known as e-mail, electronic postage, it is-a kind of electronic means of providing information exchange, is the most widely used Internet services, through the network of e-mail systems, users can use very low prices (no matter where sent to, all just pay phone bills and network fees can), in a very fast manner (You can send it to any destination in the world in a few seconds) and connect with Internet users in any corner of the world, which can be text, images, sounds, and so on. At the same time, users can get a lot of free news, special mail, and achieve easy information search.
Mail is also the tool we often use, sometimes we may have some files do not want to let others see, then we only by the encryption of their settings to become proprietary only, now look at the configuration of the mail POPs encryption process.
Ⅰ, creating a CA
Cd/etc/pki/ca
OpenSSL Genrsa 2048 > Pravite/cakey.pem
OpenSSL Req-new-x509-key pravite/cakey.pem-out Cacert.pem
chmod 600/PRAVITE/CAKEY.PEM
Ⅱ, generating certificates for Dovecot
MKDIR/ETC/DOVECOT/SSL Create dovecot directory where certificates and keys are stored
CD!$ into the directory
OpenSSL genrsa 2048 > Dovecot.key Generate private key
OpenSSL req-new-key dovecot.key-out DOVECOT.CSR Generate certificate Request
Common name (eg, your name or your server ' s hostname) []:p op3.test.com (only the user's mail is sent pop3.test.com the domain where the server is located in order to achieve SSL encryption)
chmod DOVECOT.CRT Modified
OpenSSL ca-in dovecot.csr-out Dovecot.key to ensure the security of the private key, modify permissions
RM-RF DOVECOT.CSR Delete a certificate request
Dovecot to implement Cryptographic services, you also need to use the CA's certificate, copy the CA's certificate, and put it into the/etc/dovecot/ssl/
Cp/etc/pki/ca/cacert.pem./
Ⅲ, modify dovecot configuration file/etc/dovecot.conf to support SSL
Ssl_cert_file =/ETC/DOVECOT/SSL/DOVECOT.CRT Indicates the location of the certificate
Ssl_key_file =/etc/dovecot/ssl/dovecot.key indicates the location of the private key
Ssl_ca_file =/etc/dovecot/ssl/cacert.pem indicate the location of the CA's certificate
At the same time modify the following content, modify the Dovecot listening to the protocol, as follows:
protocols = IMAP IMAPS POP3 pop3s
Reload Dovecot Service Configuration
Service Dovecot Reload
Ⅳ, testing
Mutt-f pops://gentoo@a.org@pop3.a.org
If you see the following screen, ask if you accept the certificate, then indicate that our encryption has been in effect.
Through the above method, we can encrypt our computer mail, so as long as they do not want to let others see the message can be set to only their own exclusive rights. This kind of encryption is not very strong? So that you can better protect your privacy Oh ~
Use mail POPs encryption program by the CLS software Station for your latest collection and collation, copyright belongs to the original author or company. If there is infringement, please contact us to delete.