Sol: Новая страница: «Категория:Linux How to verify that SSL for IMAP/POP3/SMTP works and a proper SSL certificate is in use. ==IMAP via SSL uses port 993== 1. connect to…»

2020-04-28T20:20:03Z

Новая страница: «Категория:Linux How to verify that SSL for IMAP/POP3/SMTP works and a proper SSL certificate is in use. ==IMAP via SSL uses port 993== 1. connect to…»

Новая страница

[[Категория:Linux]]
How to verify that SSL for IMAP/POP3/SMTP works and a proper SSL certificate is in use.

==IMAP via SSL uses port 993==
1. connect to a mail server using openssl
<syntaxhighlight lang="bash">
openssl s_client -showcerts -connect mail.example.com:993 -servername mail.example.com
</syntaxhighlight>
2. Check output and make sure that a valid certificate is shown:
<syntaxhighlight lang="bash">
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
</syntaxhighlight>
3. Make sure that you received IMAP server response:
<syntaxhighlight lang="bash">
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA AUTH=CRAM-MD5 AUTH=PLAIN IDLE ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2004 Double Precision, Inc. See COPYING for distribution information.
</syntaxhighlight>

==POP3 via SSL uses port 995==
1. connect to a mail server using openssl
<syntaxhighlight lang="bash">
openssl s_client -showcerts -connect mail.example.com:995 -servername mail.example.com
</syntaxhighlight>
2. Check output and make sure that a valid certificate is shown:
<syntaxhighlight lang="bash">
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
</syntaxhighlight>
3. Make sure that you received POP3 server response:
<syntaxhighlight lang="bash">
+OK Hello there. <1793.1385684315@localhost.localdomain>
</syntaxhighlight>

==SMTP via SSL uses port 465==
1. connect to a mail server using openssl
<syntaxhighlight lang="bash">
openssl s_client -showcerts -connect mail.example.com:465 -servername mail.example.com
</syntaxhighlight>
2. Check output and make sure that a valid certificate is shown:
<syntaxhighlight lang="bash">
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
</syntaxhighlight>
3. Make sure that you received SMTP server response:
<syntaxhighlight lang="bash">
220 mail.example.com ESMTP Postfix
</syntaxhighlight>

==SMTP via TLS/StartTLS uses port 25 or 587==
1.Connect to a mail server using openssl
<syntaxhighlight lang="bash">
openssl s_client -starttls smtp -showcerts -connect mail.example.com:25 -servername mail.example.com
</syntaxhighlight>
2. Check output and make sure that a valid certificate is shown:
<syntaxhighlight lang="bash">
Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
</syntaxhighlight>
3. Make sure that you received SMTP server response:
<syntaxhighlight lang="bash">
250 DSN
</syntaxhighlight>

SSL certificate verify - История изменений

Sol: Новая страница: «Категория:Linux How to verify that SSL for IMAP/POP3/SMTP works and a proper SSL certificate is in use. ==IMAP via SSL uses port 993== 1. connect to…»