Location of SSL certificate file

rudolfl

• May 02, 2017 10:11

Hi all, First a bit of history. One of the accounts has a domain www.example.com There is a mail server associated with this domain mail.example.com www.domain.com is protected by SSL, but "mail.example.com" is using self-signed certificate provided by cPanel. Geniuses at Apple updated iPhone to iOS10 and that stupid system does not have the option of trusting self-signed certificates anymore! So, it constantly pops up with message "can not verify server identity of mail.example.com" Going through various Apple treads, I found that I can manually load the certificate into iPhone. The only question left is where do I find the certificate file? So, I need to find certificate file that belongs to a mail server of a particular account and this certificate was generated by cPanel itself. Can someone help? Thanks, Rudolf

• 

  cPanelMichael

  • May 02, 2017 18:55

  Hello, Have you considered using a different mail server name in the settings for the Mail app? In cPanel, under "Email Accounts", you can click on "Setup Mail Client" to view the SSL settings that are available. You may also want to consider using the AutoSSL feature to install a cPanel-signed certificate for the domain name that includes the mail subdomain: Manage AutoSSL - Documentation - cPanel Documentation What is Domain TLS - cPanel Knowledge Base - cPanel Documentation Thank you.

  0
• 

  rudolfl

  • May 03, 2017 01:10

  Thank you Michael, All fixed now. Hopefully this will help someone. Scenario: By default, mail server name is mail.domain.com and this is how I configured my mail client (settings are shown in cPanel "Setup e-mail Client" under e-mail accouns). All is good while domain does not have SSL installed and is covered by cPanel AutoSSL. When one installs third-party SSL on domain that only covers www.domain.com and domain.com (most common case), access to mail.domain.com becomes problematic. All mail clients will throw a warning about SSL and will allow you to create an exception. After that things are back to normal. Apple, in their infinite wisdom decided NOT to allow exceptions from iOS10 on iPhone. Result is disastrous, as annoying security warning pops up very often when you are in the middle of something. And, needless to say, e-mails not working. Fix is to change incoming and outgoing mail server on iPhone to domain.com. Rudolf

  0
• 

  cPanelMichael

  • May 03, 2017 16:50

  Fix is to change incoming and outgoing mail server on iPhone to domain.com.

  
  I'm happy to see you were able to solve the issue. Thank you for updating us with the outcome.

  0

Please sign in to leave a comment.