My country is : Venezuela but only two Letter Code is required (..??..) Correct. Yours is VE State or Porvince: Anzoategui Locality: Puerto la Cruz Organization Name: Telesoft Organizational Unit Name: Engineering Department All these should be as you have them here. Common Name: NO IDEA ABOUT WHAT TO TYPE IN THIS FIELD I would suggest your IP, alternatively it could be your dns name, i.e. imap.yourdomain.net. Mine works with IP. E-mail address: juanflores@linux.site OK, but is that a valid email? You are creating a security certificate
I have already postfix installed on my laptop and it receives mails i send locally on my pc from PHP with mail() command, however it is not possible to read the received mails with evolution (which is the client i have installed). Perhaps it will work with a valid certificate. BTW, was it a typo in your other email, or did you forget the -days <number of days> command. I have only a pair of e-mail address on postfix which is juanflores@linux.site and root@linux.site and I can´t read any of the mails received… No, the email address is to contact you as the one who made this certificate so others could contact you to authenticate the certificate. - do I have to type my IP address in the field “Common Name”?? Yes. - how do I get mi machine´s IP address?? If not a static address, you will need something like www.dyndns.org and should instead use the dns name, since your IP may change. You can get
JUAN ERNESTO FLORES BELTRAN wrote: that you will be asking others to trust. the current address by /sbin/ifconfig (which will show the address of all interfaces.
- or can it works if I use “Common Name: Linux.site”?? If your local DNS is set up properly, and you are only reachable via an internal network, AND Linux.site is what is used for the pop/imap server, then yes. Otherwise, no. - can I recreate the certificate again (in order to fill the fields accurately) by re-using the command cd /etc/ssl/certs openssl req -new -nodes -out -imapd.pem -keyout imapd.pem as explained at README.SuSE file??? Yes, but you should add -days 375 (for a year), which gives it an expiration date. I would also add -set_serial <some number> to make it unique.
-- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Registered Linux user 231871