All Products 
Username / Customer#
Password
Log In
  • Site Search
  • Domain Search
  • WHOIS Domain Check
24/7 Support: (480) 505-8877
Hablamos Español
9 AM to 9 PM IST
7 days a week
Go Daddy Support

Search help articles, forums, and discussion groups

Installing an SSL in Courier IMAP

Date Submitted: 10-3-2011

After your certificate request is approved, download your SSL and intermediate certificate files from your account. See Downloading Your SSL Certificate for more information. You must install all the files on your Web server to complete the installation.

To Install Your SSL in Courier IMAP

  1. Gather your certificate files.
    Log in to your SSL Manager and download your primary and intermediate certificates. You also need your private key (your_domain.key), which was generated by your server along with your CSR.
  2. Create a combined .pem certificate file.
    Using a text editor such as Notepad, paste in the contents of the primary certificate and your private key, including the BEGIN and END tags. For example:
    -----BEGIN CERTIFICATE-----
    (Your primary certificate: your_domain.crt)
    -----END CERTIFICATE-----
    -----BEGIN RSA PRIVATE KEY-----
    (Your private key: your_domain.key)
    -----END RSA PRIVATE KEY-----
    Save the file as gdcertpack.pem
  3. Save the Go Daddy intermediate certificate.
    Copy the Go Daddy intermediate certificate into a text editor and save the file as gdca.txt
  4. Secure Courier IMAP.
    Locate and open imapd-ssl file (usually found in /usr/lib/courier-imap/etc/). Add the following directives and file locations:
    • TLS_CERTFILE=/some/path/gdcertpack.pem
    • TLS_TRUSTCERTS=/some/path/gdca.txt
    Verify that the line below allows SSLv3:
    • TLS_PROTOCOL=SSL3
  5. Secure POP3.
    Locate and open pop3d-ssl file (typically found in /usr/lib/courier-imap/etc/). Add the following directives and file locations:
    • TLS_CERTFILE=/some/path/gdcertpack.pem
    • TLS_TRUSTCERTS=/some/path/gdca.txt
  6. Verify your file permissions.
    Ensure gdcertpack.pem is readable by root only.
  7. Restart your Courier IMAP server.

Older email clients might not support SSLv3 or TLSv1. If you want to support users with old email clients, configure IMAP_TLS_REQUIRED=0 in both IMAP and POP3 files.

Rate This Article:

Have a question about the content of this article?