Skip to main content link. Accesskey S
  • HCL Logo
  • HCL Notes and Domino wiki
  • THIS WIKI IS READ-ONLY. Individual names altered for privacy purposes.
  • HCL Forums and Blogs
  • Home
  • Product Documentation
  • Community Articles
  • Learning Center
  • API Documentation
Search
Community Articles > Lotus Protector for Mail Security > Changing the SSL certificate used by the end user interface
  • Share Show Menu▼
  • Subscribe Show Menu▼

Recent articles by this author

Customizing the Quarantine Stylesheet

You may want to customize the users quarantine website. To do so log in to your Lotus Protector for Mail Security server using a SSH client. Navigate to the directory that holds the stylesheet files. cd varwwwenduserproventiahtmlresourcesprotectorcss Create a backup of the ...

Changing the SSL certificate used by the end user interface

In the default configuration Lotus Protector for Mail Security uses a self signed certificate for the end user interface. This article explains how to change the certificate.

Installing Lotus Protector for Mail Security Diskspace Requirement

When installing Lotus Protector for Mail Security (LPMS) you may run into a problem with LPMS installer complaining about lack of diskspace. The installer will fail if the (virtual) harddisk is smaller than 30GB. The Getting Started Guide for LPMS 2.8 incorrectly states a minimum requirement of ...

Recipient Verification with Domino LDAP

This article explains how to verify recipients email adresses using a Domino LDAP
Community articleChanging the SSL certificate used by the end user interface
Added by ~Jennifer Prehipichekoden | Edited by ~Jennifer Prehipichekoden on February 13, 2014 | Version 3
  • Actions Show Menu▼
expanded Abstract
collapsed Abstract
In the default configuration Lotus Protector for Mail Security uses a self signed certificate for the end user interface. This article explains how to change the certificate.
Tags: lpms, protector, lotus_protector

Lotus Protector for Mail Security optionally uses a end user interface for users to access their quarantined spam. This website is also used for integration with the Lotus Notes client.

In the default configuration the quarantaine ist configured for this URL: https://$(HOSTNAME):4443

Tip: Do not confuse this with the web administration iterface that runs on Port 443 on the same host.

LPMS offers an option to upload a TLS certificate but this is used by SMTP only. To change the SSL-Certificate you have to log in using SSH as root

The certificates are stored in two locations.

The certificate is stored in /etc/apache2/ssl.crt

The key is stored in /etc/apache2/ssl.key

 

You can register your own new certificate and key with any Certificate Authority and upload the two files to the two directories. It is a best practice to use a new filename and not overwrite the existing files.

To configure Apache2 to use the new files, edit the file /etc/apache2/vhosts.d/mailsec_vhosts.conf

Finally run "/etc/init.d/apache2 restart" to restart the webserver and reload the configuration.

 

Tip: In case Apache2 does not already support your Certificate Authority, you can add your CA's certificate by adding this setting to mailsec_vhosts.conf:

SSLCertificateChainFile= /etc/apache2/ssl.crt/ca.pem

Consult your Certificate Authority for more detailed information regarding their certificate key chain. See this site as an example: http://www.startssl.com/?app=21

  • Actions Show Menu▼


expanded Attachments (0)
collapsed Attachments (0)
Edit the article to add or modify attachments.
expanded Versions (1)
collapsed Versions (1)
Version Comparison     
VersionDateChanged by              Summary of changes
This version (3)Feb 13, 2014, 4:00:11 PM~Jennifer Prehipichekoden  
expanded Comments (0)
collapsed Comments (0)
Copy and paste this wiki markup to link to this article from another article in this wiki.
Go ElsewhereStay ConnectedAbout
  • HCL Software
  • HCL Digital Solutions community
  • HCL Software support
  • BlogsDigital Solutions blog
  • Community LinkHCL Software forums and blogs
  • About HCL Software
  • Privacy
  • Accessibility