Win 8 and all of its predecessors DOES allow you to install a new "trusted" certificate. Your issue appears to be that your MAIL program does not allow you to INSTALL that certificate into Win 8

I have had this problem before, and the solution is actually simple:
a) make sure your web server is also using that same certificate (consider using SquirrelMail or RoundCube ONLY over SSL links anyway) b) browse to your secure web page with IE9 or IE10 (or, older versions) -- it will complain abut the certificate
 c) VIEW the certificate, then add it to your system!

NOTE: One of the most common mistakes made is in the system NAME:
- Your self-signed certificate used the hostname of your system at installation. If you changed it, or if you use a different name in the me or default* entries, you might get an error. Also, if your mail client isn't using that same name to connect, you'll never get a match. - PERSONALLY, I called my server mail.mydomain to begin with, then made sure my DNS referred to my mail host by the same name (mail.domain), THEN made sure my clients were all connecting to mail.domain (which was resolved by my DNS server to the right host) -- and thus, the name & certificate used matched. - If that horse has already left the barn, just get a new self-signed certificate with the right name... but remember, the clients have to use that name to access the host or else the name won't match on the certificate.

OK, so once you use IE to install the certificate to your system, your mail clients should allow the connections without issue. (If you continue to have an issue, re-connect with IE to the same host name you configure in your mail client -- and see if there is still a problem with the certificate (like a name mismatch, or a date problem)... fix those issues, and you'll be fine!

FWIW: I used to have all of my users connect with IE to my SquirrelMail FIRST -- to install the certificate AND to create the "special folders" (Sent, Trash, & Drafts) that otherwise seemed to be missing all the time.

Good Luck!

Dan McAllister
IT4SOHO


On 10/4/2013 1:57 AM, Sebastian Grewe wrote:
Hey Eric,

Should be Windows Mail - what a great name isn't it? ;)

Agreed, there are free certificates too. I am myself using a free certificate 
but by creating a proper certificate chain, a CA Root Certificate on the client 
is not required. Usually they provide instructions on their website but in 
general it's just concatating the personal key and they intermediate vert into 
a single file.

Cheers,
Sebastian

On Oct 4, 2013, at 7:48 AM, Eric Shubert <[email protected]> wrote:

I didn't think that Win8 included a mail client any more. Which email client 
are you using?

I concur with Sebastian.

If you'd like a free certificate, you can get one at cacert.org. Their root 
certs aren't recognized by most (any?) programs though, so you'll also need to 
install the cacert.org root certificate on every client host which will be 
accessing your server using TLS/SSL (TLS/SSL is highly recommended). This is ok 
for soho type use, but if you have more than a handful of devices/users, 
purchasing a certificate may be your best route.

Either that or use an email client which allows you to accept a certificate 
that cannot be verified, which most do afaik. It's not much of a security risk 
to do so.

--
-Eric 'shubes'

On 10/03/2013 09:55 PM, Sebastian Grewe wrote:
If you are planning to run a real server you should consider getting a valid 
SSL certificate. The ones supplied with qmailtoaster are self signed and will 
be rejected by mail clients. Most clients allow to accept self signed 
certificates, as for windows 8 I am not sure but Google might help.



Cheers,
Sebastian

On 04.10.2013, at 04:51, Kelly Cobean <[email protected]> wrote:

I'm trying to set up my first Windows 8 laptop and the email client won't allow 
me to set up my email because it says I need to install an SSL certificate 
because I'm using SSL for the IMAP connection.  I'm using the cert that got 
installed when I installed QMT on the server.  Anyone have any insights on how 
to make this work?



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]





---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



--

PLEASE TAKE NOTE OF OUR NEW ADDRESS
===================================
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
  877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to