Rocky, Alma, Springdale 9 QT Install: Difference between revisions

From QmailToaster
Jump to navigation Jump to search
No edit summary
(9 intermediate revisions by the same user not shown)
Line 1: Line 1:
[[Main_Page#RHEL_9_&_Derivatives|Back]]<br>
[[Main_Page#RHEL_9_&_Derivatives|Back]]<br>
=CentOS Linux 9 Minimal Install=  
=Enterprise Linux 9 Minimal Install=  
==QMT Install ('Many-Domain')==  
==QMT Install ('Many-Domain')==  
  <nowiki>#</nowiki> curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_cos9.sh
  <nowiki>#</nowiki> curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_cos9.sh
Line 40: Line 40:
  [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied
  [https://github.com/qmtoaster/patches/blob/master/EL9/README.md Patches] applied


== Install certificate ==
   [[Certificate]]
   [[Certificate]]
  Test the certificate
== Test certificate ==
== Variables ==
   # curl --verbose smtps://mail.domain.tld
=== Remote user ===
   # curl --verbose imaps://mail.domain.tld
   # ruser=remote@domain.tld
<pre>
=== Local user & password ===
<nowiki>*</nowiki> Server certificate:
   # luser=postmaster@mydomain.tld
<nowiki>*</nowiki>  subject: CN=mail.domain.tld
  # lpass=`/home/vpopmail/bin/vuserinfo $luser | grep "clear passwd: " | sed 's/clear passwd: //'`
<nowiki>*</nowiki>  start date: Jul 30 09:16:16 2024 GMT
=== Server certificate FQDN ===
<nowiki>*</nowiki>  expire date: Oct 28 09:16:15 2024 GMT
  # host=mail.mydomain.tld
<nowiki>*</nowiki>  subjectAltName: host "mail.domain.tld" matched cert's "mail.domain.tld"
== Commands ==
<nowiki>*</nowiki>  issuer: C=US; O=Let's Encrypt; CN=R11
  # swaks --to $ruser --from $luser --server $host --port 465 --ehlo test -tlsc --tls-verify --auth login --auth-user $luser --auth-password $lpass
<nowiki>*</nowiki>  SSL certificate verify ok.
    === TLS peer certificate passed CA verification, passed host verification (using host mail.mydomain.tld to verify)
</pre>
  # swaks --to $ruser --from $luser --server $host --port 587 --ehlo test -tls --tls-verify --auth login --auth-user $luser --auth-password $lpass
    === TLS peer certificate passed CA verification, passed host verification (using host mail.mydomain.tld to verify)
  #

Revision as of 19:23, 20 August 2024

Back

Enterprise Linux 9 Minimal Install

QMT Install ('Many-Domain')

# curl -o /usr/local/bin/qt_install https://raw.githubusercontent.com/qmtoaster/scripts/master/qt_install_cos9.sh
# chmod 755 /usr/local/bin/qt_install
# qt_install
# toaststat
Status of toaster services send: up (pid 1323) 1517 seconds smtp: up (pid 1324) 1517 seconds submission: up (pid 1325) 1517 seconds send/log: up (pid 1316) 1517 seconds smtp/log: up (pid 1311) 1517 seconds submission/log: up (pid 1314) 1517 seconds
systemd service: clamd@scan: [ OK ] systemd service: clamav-freshclam: [ OK ] systemd service: spamassassin: [ OK ] systemd service: dovecot: [ OK ] systemd service: mariadb: [ OK ] systemd service: httpd: [ OK ] systemd service: named: [ OK ] systemd service: ntpd: [ OK ] systemd service: sshd: [ OK ] systemd service: network: [ OK ] systemd service: crond: [ OK ] systemd service: acpid: [ OK ] systemd service: atd: [ OK ] systemd service: autofs: [ OK ] systemd service: smartd: [ OK ] systemd service: irqbalance: [ OK ] (Multiple processors only)
# conntest Enter a valid remote email account to which QMT will send mail: <email address> IMAPS: postmaster@domain.tld --> success Submission: postmaster@domain.tld --> success SMTPS: postmaster@domain.tld --> success
Scanners
Many Domain Install (Alias Domain)
Qmail-1.03-3.3.11 (OpenSSL3)
Patches applied

Install certificate

 Certificate

Test certificate

 # curl --verbose smtps://mail.domain.tld
 # curl --verbose imaps://mail.domain.tld
* Server certificate:
*  subject: CN=mail.domain.tld
*  start date: Jul 30 09:16:16 2024 GMT
*  expire date: Oct 28 09:16:15 2024 GMT
*  subjectAltName: host "mail.domain.tld" matched cert's "mail.domain.tld"
*  issuer: C=US; O=Let's Encrypt; CN=R11
*  SSL certificate verify ok.