You buy one. Go look at your certificate provider. I costs a lot more though, but offers unlimited subdomain usage. George
On 6/5/2010 9:14 AM, Scott Hughes wrote: > So how does one do a 'wildcard' certificate? I'm getting close to > bringing a new QMT server online and would like to have better > certificate results. > > Thanks, > > Scott > > > On 6/4/10 6:04 PM, George Varagas wrote: >> Scott, >> Guess I answered too quickly. Just noticed different subdomains (www >> and mail). Unless you have a multi-domain certificate or a wildcard >> certificate then the certificate is most probably only good for >> mail.SERVERNAME.net >> George >> >> On 6/5/2010 6:58 AM, Scott Hughes wrote: >>> Quick question about certificates. I set up my certificate (via >>> GoDaddy) with my correct hostname (mail.SERVERNAME.net). Now I >>> notice if I go to: www.SERVERNAME.net via https, I get a >>> certificate warning. Any way around this or did I mess up with I >>> signed up for the certificate? >>> >>> Thanks, >>> Scott >>> >>> >>> On 6/4/10 10:38 AM, Eric Broch wrote: >>>> CJ, >>>> >>>> I don't use multiple certificates, but I did, in times past, try to find a >>>> way to implement it and was glad to see the tutorial posted here for it. >>>> >>>> Eric >>>> >>>> -----Original Message----- >>>> From: Maxwell Smart [mailto:[email protected]] >>>> Sent: Friday, June 04, 2010 9:12 AM >>>> To: [email protected] >>>> Subject: RE: [qmailtoaster] Re: Webmail SSL >>>> >>>> Eric, >>>> >>>> Sounds like the exact same configuration as mine. >>>> >>>> SNI is Server Name Includes and it allows multiple secure connections >>>> with a single IP. I am having trouble getting mine to work. >>>> >>>> Do you use multiple certificates? One for each top level domain? >>>> >>>> CJ >>>> >>>> Quoting Eric Broch <[email protected]>: >>>> >>>> >>>>> CJ, >>>>> >>>>> Virtual hosts (yes, 5 domains on 1 server), >>>>> SNI (I don't think so, I'm not really sure what it is???), >>>>> openssl-0.9.8e-12.el5_4.6 (yes) (i386 and x86_64), >>>>> gnutls-1.4.1-3.el5_4.8 (yes) (i386 and x86_64). >>>>> >>>>> Eric >>>>> >>>>> -----Original Message----- >>>>> From: Maxwell Smart [mailto:[email protected]] >>>>> Sent: Thursday, June 03, 2010 10:10 PM >>>>> To: [email protected] >>>>> Subject: RE: [qmailtoaster] Re: Webmail SSL's >>>>> >>>>> Eric, >>>>> >>>>> Virtual Hosts? Are you using SNI? GnuTLS or SSL? What version OpenSSL? >>>>> >>>>> Sorry for so many questions, but a few of us on this list are trying >>>>> to sort this. >>>>> >>>>> CJ >>>>> >>>>> Quoting Eric Broch <[email protected]>: >>>>> >>>>> >>>>>> CJ, >>>>>> >>>>>> I secure three sites (domains) on the same server. None of my other >>>>>> >>>>> clients >>>>> >>>>>> use webmail >>>>>> >>>>>> Eric B. >>>>>> >>>>>> -----Original Message----- >>>>>> From: Maxwell Smart [mailto:[email protected]] >>>>>> Sent: Thursday, June 03, 2010 6:05 PM >>>>>> To: [email protected] >>>>>> Subject: Re: [qmailtoaster] Re: Webmail SSL >>>>>> >>>>>> Eric, >>>>>> >>>>>> Have you been successful in securing more than one site? >>>>>> >>>>>> CJ >>>>>> >>>>>> Quoting Eric Broch <[email protected]>: >>>>>> >>>>>> >>>>>>> Maxwell Smart wrote: >>>>>>> >>>>>>>> I realize that it's a bit of a hack and I don't like it, but I >>>>>>>> cannot get it to work correctly otherwise. I just tried your >>>>>>>> config and it didn't work either. >>>>>>>> >>>>>>>> You are using the webmail suffix where I am not. I am trying to >>>>>>>> get mail.myserver.com to work using SNI. I should be able to have >>>>>>>> multiple virtual servers using https and I cannot get it to work. >>>>>>>> I think part of the problem is openssl 0.9.8e SNI requires f and >>>>>>>> newer. I upgraded on my test server, but I'm still having problems >>>>>>>> getting it to work correctly. >>>>>>>> >>>>>>>> I'll figure it out, it's just frustrating when you read the >>>>>>>> documentation and it doesn't quite work that way. Then where do >>>>>>>> you start to troubleshoot. >>>>>>>> >>>>>>>> Quoting Eric Shubert <[email protected]>: >>>>>>>> >>>>>>>> >>>>>>>>> I'm not saying that ErrorDocument won't work, just that it's a bit >>>>>>>>> of a hack. >>>>>>>>> >>>>>>>>> The conventional way (and 'better' for a number of reasons) is to >>>>>>>>> use the RewriteEngine. I seem to recall that there's a way to turn >>>>>>>>> on logging for the rewrite engine if you're having a problem with >>>>>>>>> it. >>>>>>>>> >>>>>>>>> Here's the RewriteRule I'm presently using: >>>>>>>>> RewriteRule ^/(webmail.*)$ https://%{SERVER_NAME}/$1 [R=301,L] >>>>>>>>> >>>>>>>>> Upon closer examination, I see that >>>>>>>>> RewriteRule ^(.*/webmail*)$ https://%{SERVER_NAME}$1 [L,R] >>>>>>>>> appears to be missing a period after webmail. I believe that it should >>>>>>>>> >>>>>> be: >>>>>> >>>>>>>>> RewriteRule ^(.*/webmail.*)$ https://%{SERVER_NAME}$1 [L,R] >>>>>>>>> Subtle, but big difference. I believe this would work, the same as >>>>>>>>> the one I'm using above. >>>>>>>>> -- >>>>>>>>> -Eric 'shubes' >>>>>>>>> >>>>>>>>> Maxwell Smart wrote: >>>>>>>>> >>>>>>>>>> That's exactly where I am having problems and that's the only way >>>>>>>>>> I can get it to work. If I have the welcome.conf enabled it goes >>>>>>>>>> to the apache welcome page instead of redirecting and the log >>>>>>>>>> file says failed, reason: SSL connection required. If I disable >>>>>>>>>> the welcome.conf and include the Error 403 line it works. I was >>>>>>>>>> just testing it with the variable when I received this e >>>>>>>>>> mail.Quoting Eric Shubert <[email protected]>: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Maxwell Smart wrote: >>>>>>>>>>> >>>>>>>>>>>> It appears as though you have a default configuration. Replace >>>>>>>>>>>> this in your squirrelmail.conf file. >>>>>>>>>>>> >>>>>>>>>>>> <Directory /usr/share/squirrelmail> >>>>>>>>>>>> Options None >>>>>>>>>>>> Order allow,deny >>>>>>>>>>>> allow from all >>>>>>>>>>>> </Directory> >>>>>>>>>>>> >>>>>>>>>>>> with this >>>>>>>>>>>> >>>>>>>>>>>> <Directory "/usr/share/squirrelmail"> >>>>>>>>>>>> RewriteEngine on >>>>>>>>>>>> RewriteCond %{SERVER_PORT} !^443$ >>>>>>>>>>>> RewriteRule ^(.*/webmail*)$ https://%{SERVER_NAME}$1 [L,R] >>>>>>>>>>>> allow from all >>>>>>>>>>>> Options >>>>>>>>>>>> SSLRequireSSL >>>>>>>>>>>> ErrorDocument 403 "https://your.server.com/webmail/"; >>>>>>>>>>>> </Directory> >>>>>>>>>>>> >>>>>>>>>>>> You will need to change the your.server.com to your server name. >>>>>>>>>>>> >>>>>>>>>>>> CJ >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>> You shouldn't need the ErrorDocument line. >>>>>>>>>>> >>>>>>>>>>> In addision, if you were to use that hack, it'd be better to use >>>>>>>>>>> the %{SERVER_NAME} variable instead of hard coding your domain >>>>>>>>>>> name. >>>>>>>>>>> >>>>>>>>>>> -- >>>>>>>>>>> -Eric 'shubes' >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> >>>>>>>>>>> (www.vickersconsulting.com) >>>>>>>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>>>>>>> >>>>>> installations. >>>>>> >>>>>>>>>>> If you need professional help with your setup, contact them >>>>>>>>>>> >>>> today! >>>> >>>>>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Please visit qmailtoaster.com for the latest news, updates, and >>>>>> >>>>>>>>>>> packages. >>>>>>>>>>> To unsubscribe, e-mail: >>>>>>>>>>> [email protected] >>>>>>>>>>> For additional commands, e-mail: >>>>>>>>>>> [email protected] >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>> Cecil Yother, Jr. "cj" >>>>>>>>>> cj's >>>>>>>>>> 2318 Clement Ave >>>>>>>>>> Alameda, CA 94501 >>>>>>>>>> >>>>>>>>>> tel 510.865.2787 >>>>>>>>>> http://yother.com >>>>>>>>>> >>>>>>>>>> ---------------------------------------------------------------- >>>>>>>>>> This message was sent using IMP, the Internet Messaging Program. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> >>>>>>>>>> (www.vickersconsulting.com) >>>>>>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>>>>>> >>>>>> installations. >>>>>> >>>>>>>>>> If you need professional help with your setup, contact them today! >>>>>>>>>> >>>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> >>>>>>>>> (www.vickersconsulting.com) >>>>>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>>>>> >>>>>> installations. >>>>>> >>>>>>>>> If you need professional help with your setup, contact them today! >>>>>>>>> >>>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Please visit qmailtoaster.com for the latest news, updates, and >>>>>> >>>>>>>>> packages. >>>>>>>>> To unsubscribe, e-mail: >>>>>>>>> [email protected] >>>>>>>>> For additional commands, e-mail: >>>>>>>>> >>>>>> [email protected] >>>>>> >>>>>>>>> >>>>>>>> Cecil Yother, Jr. "cj" >>>>>>>> cj's >>>>>>>> 2318 Clement Ave >>>>>>>> Alameda, CA 94501 >>>>>>>> >>>>>>>> tel 510.865.2787 >>>>>>>> http://yother.com >>>>>>>> >>>>>>>> ---------------------------------------------------------------- >>>>>>>> This message was sent using IMP, the Internet Messaging Program. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> >>>>>>>> (www.vickersconsulting.com) >>>>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>>>> >>>>> installations. >>>>> >>>>>>>> If you need professional help with your setup, contact them today! >>>>>>>> >>>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- Please visit qmailtoaster.com for the latest news, updates, and >>>>>> >>>>>>>> packages. >>>>>>>> To unsubscribe, e-mail: >>>>>>>> [email protected] >>>>>>>> For additional commands, e-mail: >>>>>>>> >>>>>> [email protected] >>>>>> >>>>>>>> >>>>>>> I don't use the redirect in the squirrelmail config file but in the >>>>>>> apache config file using virtual hosting. You might give this a try >>>>>>> >>>>>>> <VirtualHost *:80> >>>>>>> ServerName www.whitehorsetc.com >>>>>>> ServerAlias whitehorsetc.com >>>>>>> ServerAdmin [email protected] >>>>>>> DocumentRoot /var/www/html >>>>>>> # >>>>>>> RewriteEngine On >>>>>>> # >>>>>>> RewriteLog "/var/log/httpd/whitehorsetc.com-rewrite_log" >>>>>>> RewriteLogLevel 9 >>>>>>> # >>>>>>> RewriteCond %{REQUEST_URI} =/webmail/ [OR] >>>>>>> RewriteCond %{REQUEST_URI} =/webmail [OR] >>>>>>> RewriteCond %{REQUEST_URI} =/webmail/src/right_main.php >>>>>>> RewriteRule ^(.*)$ https://www.whitehorsetc.com$1 [R=301,L] >>>>>>> # >>>>>>> RewriteCond %{HTTP_HOST} !^www\.whitehorsetc\.com [NC] >>>>>>> RewriteRule ^(.*)$ http://www.whitehorsetc.com$1 [R=301,L] >>>>>>> # >>>>>>> ErrorLog logs/whitehorsetc.com-error_log >>>>>>> CustomLog logs/whitehorsetc.com-access_log common >>>>>>> </VirtualHost> >>>>>>> >>>>>>> Eric >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- >>>>>> >>>>>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>>>>> (www.vickersconsulting.com) >>>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>>> >>>>> installations. >>>>> >>>>>>> If you need professional help with your setup, contact them today! >>>>>>> >>>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- >>>>>> >>>>>>> Please visit qmailtoaster.com for the latest news, updates, and >>>>>>> >>>>>> packages. >>>>>> >>>>>>> To unsubscribe, e-mail: >>>>>>> [email protected] >>>>>>> For additional commands, e-mail: >>>>>>> >>>>>> [email protected] >>>>>> >>>>>>> >>>>>> Cecil Yother, Jr. "cj" >>>>>> cj's >>>>>> 2318 Clement Ave >>>>>> Alameda, CA 94501 >>>>>> >>>>>> tel 510.865.2787 >>>>>> http://yother.com >>>>>> >>>>>> ---------------------------------------------------------------- >>>>>> This message was sent using IMP, the Internet Messaging Program. >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- >>>>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> (www.vickersconsulting.com) >>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>> >>>>> installations. >>>>> >>>>>> If you need professional help with your setup, contact them today! >>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>>> ----- >>>>>> Please visit qmailtoaster.com for the latest news, updates, and >>>>>> packages. >>>>>> >>>>>> To unsubscribe, e-mail: >>>>>> >>>>> [email protected] >>>>> >>>>>> For additional commands, e-mail: >>>>>> [email protected] >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>> ----- >>>>> >>>>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>>>> (www.vickersconsulting.com) >>>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>>> >>>>> installations. >>>>> >>>>>> If you need professional help with your setup, contact them today! >>>>>> >>>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>> ----- >>>>> >>>>>> Please visit qmailtoaster.com for the latest news, updates, and >>>>>> packages. >>>>>> >>>>>> To unsubscribe, e-mail: >>>>>> >>>>> [email protected] >>>>> >>>>>> For additional commands, e-mail: >>>>>> >>>>> [email protected] >>>>> >>>>>> >>>>> Cecil Yother, Jr. "cj" >>>>> cj's >>>>> 2318 Clement Ave >>>>> Alameda, CA 94501 >>>>> >>>>> tel 510.865.2787 >>>>> http://yother.com >>>>> >>>>> ---------------------------------------------------------------- >>>>> This message was sent using IMP, the Internet Messaging Program. >>>>> >>>>> >>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>> ----- >>>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>>> (www.vickersconsulting.com) >>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>> >>>> installations. >>>> >>>>> If you need professional help with your setup, contact them today! >>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> >>>>> ----- >>>>> Please visit qmailtoaster.com for the latest news, updates, and >>>>> packages. >>>>> >>>>> To unsubscribe, e-mail: >>>>> >>>> [email protected] >>>> >>>>> For additional commands, e-mail: >>>>> [email protected] >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> ----- >>>> >>>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>>> (www.vickersconsulting.com) >>>>> Vickers Consulting Group offers Qmailtoaster support and >>>>> >>>> installations. >>>> >>>>> If you need professional help with your setup, contact them today! >>>>> >>>>> >>>> ---------------------------------------------------------------------------- >>>> ----- >>>> >>>>> Please visit qmailtoaster.com for the latest news, updates, and >>>>> packages. >>>>> >>>>> To unsubscribe, e-mail: >>>>> >>>> [email protected] >>>> >>>>> For additional commands, e-mail: >>>>> >>>> [email protected] >>>> >>>>> >>>> Cecil Yother, Jr. "cj" >>>> cj's >>>> 2318 Clement Ave >>>> Alameda, CA 94501 >>>> >>>> tel 510.865.2787 >>>> http://yother.com >>>> >>>> ---------------------------------------------------------------- >>>> This message was sent using IMP, the Internet Messaging Program. >>>> >>>> >>>> ---------------------------------------------------------------------------- >>>> ----- >>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>> (www.vickersconsulting.com) >>>> Vickers Consulting Group offers Qmailtoaster support and installations. >>>> If you need professional help with your setup, contact them today! >>>> ---------------------------------------------------------------------------- >>>> ----- >>>> Please visit qmailtoaster.com for the latest news, updates, and >>>> packages. >>>> >>>> To unsubscribe, e-mail: >>>> [email protected] >>>> For additional commands, e-mail: >>>> [email protected] >>>> >>>> >>>> >>>> >>>> --------------------------------------------------------------------------------- >>>> Qmailtoaster is sponsored by Vickers Consulting Group >>>> (www.vickersconsulting.com) >>>> Vickers Consulting Group offers Qmailtoaster support and installations. >>>> If you need professional help with your setup, contact them today! >>>> --------------------------------------------------------------------------------- >>>> Please visit qmailtoaster.com for the latest news, updates, and >>>> packages. >>>> >>>> To unsubscribe, e-mail: >>>> [email protected] >>>> For additional commands, e-mail: >>>> [email protected] >>>> >>>> >>>>
