Creating a Self-Signed SSL Certificate

Articles and documents provided by support staff covering Mailtraq features and general operation.

Creating a Self-Signed SSL Certificate

Postby Elric Pedder » Mon Feb 13th, 2012 5:50pm

This tutorial will show you how to create a self-signed SSL certificate in Mailtraq. This certificate is necessary to create secure services such as SMTPS and IMAPS where all traffic is securely encrypted and cannot be captured or inspected by third-parties.

Self-Signed Certificates

A self-signed certificate provides the same cryptography as a certificate signed by a Certificate Authority (such as Verisign or Thawte) but cannot be used to prove the identity of the server. Proving identity is not required to encrypt the traffic though and the only down-side is that the mail client will display a security warning dialogue and the user will have to manually accept this certificate the first time it is used. The benefit is that this is quick, easy and does not require you to purchase a certificate.

Creating the Certificate

Go to Options | Certificates in the Mailtraq Console and click New Certificate.


Then select Generate a Self-Signed Certificate and click Next.

On the next page enter the details about your organisation and the server you wish to identify. In the Subject you should enter the same name that the client will use to connect to your server. This is typically the public host name for your server but it could also be an IP address.


Note that the Country should be a two character code that is the same as the country code on your domain (US for the United States of America).


Click Next and you will see the Certificate Cryptography page. Here we recommend that you select RSA, SHA1 and a Key Size of 1024 bits. Set a Valid To date in the future. You can change the number of bites to 2048 or greater if you wish to have a more secure connection but note that some clients will have problems connecting if the number of bits is too high.

Click Next and then generate the certificate, which will take a little time and then it will be displayed.


You do not need to make a note of this text as it can be seen later by clicking on the Certificate properties. Click Finish and you will see your new certificate added to the list.

You can select this new certificate from the SSL tab of the SMTP, POP3, IMAP and other services.
You do not have the required permissions to view the files attached to this post.
Mailtraq Development and Escalation Support
Novitraq Incorporated
User avatar
Elric Pedder
Mailtraq Escalation Support
Posts: 2675
Joined: Tue Nov 23rd, 2004 1:16pm
Location: Montreal, Canada

Return to Mailtraq Knowledgebase and FAQ

Who is online

Users browsing this forum: No registered users and 1 guest