Install a certificate for dovecot

Download of the files

First you have to retrieve the files necessary for the installation of your certificate. You need 2 files:

• Your private key: this file was generated at the same time as your CSR when you ordered the certificate. If a password has been set up on this key, it must be decrypted. You can do it directly thanks to our online tool: Private key decryption by your browser


• Your certificate and the certification chain: from the status page of your certificate, "View certificate" button, click on the "View certificate with chain" link. This will allow you to download your certificate and the chain in PEM format.

Installation of the certificate

To install your certificate under dovecot, you must edit the fileconf.d/10-ssl.conf. This file is usually located at the following path /etc/dovecot/conf.d/. Edit the following lines in this file

ssl_key = </path/to/your/privatekey.key	# your private key, generate with the CSR
ssl_cert = </path/to/your/certificate.pem
ssl_protocols = !SSLv2 !SSLv3
ssl_cipher_list = !EDH:!RC4:!ADH:!DSS:HIGH:+AES128:+AES256-SHA256:+AES128-SHA256:+SHA:!3DES

Make sure the SSL directive is enabled

    ssl = yes

Useful links

• Dovecot official documentation