Configure Sendmail SSL encryption for sending and receiving email

by on December 4, 2006 · 3 comments· LAST UPDATED December 4, 2006

in , ,

Q. How do I configure Sendmail email server to use SSL encryption for sending/receiving email? I have already obtained or received the required valid SSL certificate. It is stored in /etc/mail/ssl directory as follows:

SSL Keys and Certification files
=> /etc/mail/ssl/sendmail.pem
=> /etc/mail/ssl/ca-bundle.crt

Now how do I configure sendmail for SSL under Fedora Core or RHEL or Cent OS?

A. Sendmail is a mail transfer agent (MTA) and you need a valid SSL certificate on the server. Sendmail remains the most popular MTA on the Internet, although this is probably fading. Its popularity is due in part to its position as the standard MTA under most variants of the Unix operating system.

Sendmail can be configured to encrypt email via the secure socket layer (SSL) when you want to send and receives emails.

Open sendmail configuration file /etc/mail/sendmail.mc using text editor such as vi:
# vi /etc/mail/sendmail.mc

Now append/modify following directives:
define(`confCACERT_PATH',`/etc/mail/ssl/certs')
define(`confCACERT',`/etc/mail/ssl/ca-bundle.crt')
define(`confSERVER_CERT',`/etc/mail/ssl/sendmail.pem')
define(`confSERVER_KEY',`/etc/mail/ssl/sendmail.pem')

And make sure port is set to smtps (secure smtp i.e. port 465):
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl


Restart sendmail and secure pop3s/imaps

Type the following commands to restart sendmail and related services:
# /etc/init.d/sendmail restart
# chkconfig pop3s on
# chkconfig imaps on
# /etc/init.d/xinetd restart

pop3s and imaps will start from xinetd

How do I generate certificates locally for testing purpose only?

If you don't have certificates you can generates certificates locally on Cent OS/RHEL/Fedora Core. Type the following commands:
# cd /usr/share/ssl/certs
# make sendmail.pem

Now open sendmail /etc/mail/sendmail.mc config file and append/modify directives as follows:
define(`confCACERT_PATH',`/usr/share/ssl/certs')
define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl

Restart sendmail as discussed above.

TwitterFacebookGoogle+PDF versionFound an error/typo on this page? Help us!

{ 3 comments… read them below or add one }

1 Nandkishor April 17, 2007 at 9:20 am

Hi,
my qmailserver is at out of location. All users sending & receiving the mails through this server.
It is possible to setup the fetching sendmail server to local. All users are send & received the mail through this server & not directlay connected to outside server qmail server for send & received the mails.
Hoiw I configurd this fetchning mail server.

Reply

2 praveen July 12, 2011 at 11:34 am

Interviewer asked me one question:
User is unable to send/receive the mail.
How u will troubleshoot it?
Explain in clear manner with steps.
I didnt answer to this question.
Can u plz tell the answer to this question as soon as possible.

Reply

3 DMannn February 21, 2014 at 6:42 pm

Under “Now append/modify following directives:”, you may need to change:
define(`confCACERT_PATH’,`/etc/mail/ssl/certs’)
to read:
define(`confCACERT_PATH’,`/etc/mail/ssl’)

Great tutorial!

Reply

Leave a Comment

Tagged as:

Previous Faq:

Next Faq: