Do clients SSL certificates work for mail as well?

[Chris1]

Hello,

I am wondering whether client SSL certificates work for mail as well as their website?

Can it work over SNI or by dedicated IP or both? Does Postfix even have SNI support?

Kind regards,
Chris

 

[IgorG]

I think that this article will help you - http://kb.odin.com/en/118918

 

[Chris1]

Hi Igor,

Thank you but this was a more general question as to whether client certificates work for their mail?

I understand the the shared server certificate works but will other client installed certificates work for mail in addition to their website?

Do mail servers have SNI support so it knows which certificate to use?

Kind regards,
Chris

 

[IgorG]

SNI is webservers feature not related to mailservers. More details here - http://en.wikipedia.org/wiki/Server_Name_Indication

 

[Chris1]

Hi igor,

Thank you. So customers personal certificates wont work with their own mail?

Does it work on dedicated IP's?

I would like to know if there is a way to stop certificate warnings (from using the shared server ip) in email programs when using mail.*domain* as the mail server.

Kind regards,
Chris

 

[IgorG]

It is different separate certificates - for web and for mail. You shouldn't mix them.

 

[Chris1]

Hi Igor,

Oh ok, so the SSL certificate in Tools & Settings > SSL Certificates is not the same one used for mail?

Kind regards,
Chris

 

[IgorG]

Right. As you can see on top of this page:

SSL certificates secure the transfer of sensitive data from visitors to your website, and also verify the website identity.

 

[Chris1]

Hi Igor.

Thank you.

How can I update the certificate for POP, IMAP and SMTP services? Can I use a standard Rapid SSL certificate?

Kind regards,
Chris

 

[IgorG]

Read this instruction, for instance - http://alpha-computer-services.acshostings.com/installing-smtp-imap-pop3-ssl-certificate-plesk-linux

 

[Chris1]

Read this instruction, for instance - http://alpha-computer-services.acshostings.com/installing-smtp-imap-pop3-ssl-certificate-plesk-linux

Hi Igor,

Thank you, much appreciated.

Kind regards,
Chris