Open Marco-Total opened 3 years ago
Hello @RUDI-TERROR ,
inspecting the code, yet no "ignore certificate validation" option is implemented. It seems that the tools uses different ways for TLS depending on the Service (POP, IMAP, SMTP) and each would require this change. I think generally this should be no big deal.
But given, that your email users need to connect & talk to you same server in a same, secure way as the monitoring tools: Wouldn't it be better to at least use self-signed certificates? You can then add them to the respective trust stores for your users as well as for the monitoring tool.
when I try to add the account in outlook, i get a message:
This certification authority root certificate is not trusted because it is not in the repository of trusted root certification authorities.
Can I install the certificate on my monitoring-server in a "ca-trust" store?
Beware, that there are two different things:
When Outlook, Browsers & Co. connect to a SSL Encrypted Site, they download the certificate (2) and look our for a signature on that certificate from a CA (1) they trust: So they check if they have a CA registered as trusted and cryptographically check that the signature us valid signed by a trusted CA.
So if you want to create and use own certificates the same way as you'd i.e. do with letsencrypt or Digicert certificates, you need to
The so called "self-signed certificates" are just a certificates which are not signed by any CA.
The way to add you own CA to you trust store depends on the OS & software) i.e. Browsers tend to have their own CA list.
I assume you are german, so here a few links which might help you in creating a CA, installing the CA in you clients (Windows/Linux) and signing a certificate for use in you mail server.
Note: This only makes sense for pure internal sever. If you server is publicy accessible I recommend using Letsencrypt. This also only works if your server is reachable by a DNS name like mymailserver.mycompany
. You can's use signed certificates by IP only
Hello,
when I try to reach the mail server from the LAN, I get a certificate error message:
I can understand the error, is there any way to trust "insecure certificates" anyway?
Thx for yout help!
Rudi