Differences

This shows you the differences between two versions of the page.

--- blog:set_up_davmail_gateway [2018-10-11 15:03] – brb
+++ blog:set_up_davmail_gateway [2018-10-11 16:40] (current) – brb
@@ Line 47: / Line 47: @@
 ===== Create A SSL Certificate =====
-In order to enable SSL encryption, you will need a SSL certificate and SSL private key in the PEM format. If you have purchased a certificate from a Certificate Authority, then you should already have your certificate and key. If so, continue to the Configuring SSL section below. Otherwise, you can generate a self-signed certificate by following these steps.
+Use the Letsencrypt Certbot to create a certificate.
-Generate a RSA key with OpenSSL:
-<code class="code-pre">sudo openssl genrsa -out /usr/lib/ssl/private/davmail.key 2048</code>
-Make sure the key is owned by root and permissions are set properly:
-<code class="code-pre">sudo chown root:root /usr/lib/ssl/private/davmail.key
-sudo chmod 600 /usr/lib/ssl/private/davmail.key</code>
-Now, create a certificate signing request:
-<code class="code-pre">sudo openssl req -new -key /usr/lib/ssl/private/davmail.key -out /usr/lib/ssl/certs/davmail.csr</code>
-OpenSSL will now ask you several questions. The only important field is **Common Name**, which should be set to the domain name or IP address of your droplet which will be accessed by your E-mail clients (e.g. davmail.mydomain.com or 123.123.123.123). The other fields can be left at their defaults by just pressing enter or can be filled in with anything:
-<code class="code-pre">You are about to be asked to enter information that will be incorporated into your certificate request.
-What you are about to enter is what is called a Distinguished Name or a DN.
-There are quite a few fields but you can leave some blank
-For some fields there will be a default value,
-If you enter '.', the field will be left blank.
-    -----
-Country Name (2 letter code) [XX]:US
-State or Province Name (full name) []:New York
-Locality Name (eg, city) [Default City]:New York City
-Organization Name (eg, company) [Default Company Ltd]:Lolcats United
-Organizational Unit Name (eg, section) []:Keyboard Cat Department
-Common Name (eg, your name or your server's hostname) []:mydomain.com
-Email Address []:me@mydomain.com
-Please enter the following 'extra' attributes
-to be sent with your certificate request
-A challenge password []:
-An optional company name []:</code>
-Sign the certificate request using your private key, setting the expiration date with the ''%%-days%%'' argument:
-<code class="code-pre">sudo openssl x509 -req -signkey /usr/lib/ssl/private/davmail.key -in /usr/lib/ssl/certs/davmail.csr -out /usr/lib/ssl/certs/davmail.crt -days 365</code>
-With the settings above, the certificate will expire in 365 days (a year).
-You now have your own SSL certificate!
 ===== Configuring SSL =====
-Now that you have your SSL certificate, you will have to convert it into a format DavMail understands. The following examples will use the key and certificate we generated above. If you purchased a certificate from a Certificate Authority, then use those files in place of ''%%davmail.key%%'' and ''%%davmail.crt%%''.
+cd to ''/etc/letsencrypt/live/your-server'' and convert the letsencrypt certificates to a p12 file using this script. You must use a PASSWORD on the file!
-Start by combining your certificate and key file with cat:
-<code class="code-pre">sudo -s cat /usr/lib/ssl/private/davmail.key /usr/lib/ssl/certs/davmail.crt > /usr/lib/ssl/certs/davmail.pem
-exit</code>
-Once again, set permissions so only root can access the key file:
-<code class="code-pre">sudo chown root:root /usr/lib/ssl/certs/davmail.pem
-sudo chmod 600 /usr/lib/ssl/certs/davmail.pem</code>
-Now convert your combined key and certificate to a pkcs12 file:
-<code class="code-pre">sudo openssl pkcs12 -export -in /usr/lib/ssl/certs/davmail.pem -out /usr/lib/ssl/certs/davmail.p12 -name “davmail”</code>
-You will be prompted to enter an export password. This can not be blank!
-You must set a password or DavMail will not work properly.
-Set permissions:
-<code class="code-pre">sudo chown root:root /usr/lib/ssl/certs/davmail.pem
+<code bash>
-sudo chmod 600 /usr/lib/ssl/certs/davmail.pem</code>
+#!/bin/bash
-Now open your DavMail configuration again:
+sudo openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -certfile cert.pem -out /etc/ssl/certs/davmail.p12
+</code>
-<code class="code-pre">sudo nano /etc/davmail.properties</code>
 Add the following configuration options to inform DavMail of the location of the pkcs12 file you just generated and the passphrase you set:
 <code class="code-pre">davmail.ssl.keystoreType=PKCS12
 davmail.ssl.keystoreFile=/usr/lib/ssl/certs/davmail.p12
-davmail.ssl.keyPass=password
+davmail.ssl.keyPass=PASSWORD
-davmail.ssl.keystorePass=password</code>
+davmail.ssl.keystorePass=PASSWORD</code>
 Both ''%%davmail.ssl.keyPass%%'' and ''%%davmail.ssl.keystorePass%%'' should should have the same value. Save the configuration file.
@@ Line 125: / Line 72: @@
 The Debian package we downloaded eariler does not contain an init script, so we must create our own.
+You can also try starting davmail using
+  sudo davmail /etc/davmail.properties
+To have a proper startup job is better, of course:
 Create a new file with your favorite text editor:
 <code class="code-pre">sudo nano /etc/init.d/davmail</code>
-Copy and paste the following into the file:
+Copy and paste the following into the file: [[:files:davmail]]
-<code class="code-pre">#! /bin/sh
-### BEGIN INIT INFO
-# Provides:          davmail
-# Required-Start:    $remote_fs $syslog
-# Required-Stop:     $remote_fs $syslog
-# Default-Start:     2 3 4 5
-# Default-Stop:      0 1 6
-# Short-Description: DavMail Exchange gatway
-# Description:       A gateway between Microsoft Exchange and open protocols.
-    ### END INIT INFO
-    # Author: Jesse TeKrony <jesse ~at~ jtekrony ~dot~ com>
-    PATH=/sbin:/usr/sbin:/bin:/usr/bin
-    DESC="Davmail Exchange gateway"
-    NAME=davmail
-    CONFIG=/etc/davmail.properties
-    DAEMON=/usr/bin/$NAME
-    DAEMON_ARGS="$CONFIG"
-    PIDFILE=/var/run/$NAME.pid
-    SCRIPTNAME=/etc/init.d/$NAME
-    LOGFILE=/var/log/davmail.log
-    # Exit if the package is not installed
-    [ -x "$DAEMON" ] || exit 0
-    # Read configuration variable file if it is present
-    [ -r /etc/default/$NAME ] && . /etc/default/$NAME
-    # Load the VERBOSE setting and other rcS variables
-    . /lib/init/vars.sh
-    # Define LSB log_* functions
-    . /lib/lsb/init-functions
-    #
-    # Function that starts the daemon/service
-    #
-    do_start()
-    {
-        start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
-            || return 1
-        start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
-            $DAEMON_ARGS >> $LOGFILE 2>&1 &
-        [ $? != 0 ] && return 2
-        echo $! > $PIDFILE
-        exit 0
-    }
-    #
-    # Function that stops the daemon/service
-    #
-    do_stop()
-    {
-        start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE
-        RETVAL="$?"
-        [ "$RETVAL" = 2 ] && return 2.
-        start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
-        [ "$?" = 2 ] && return 2
-        rm -f $PIDFILE
-        return "$RETVAL"
-    }
-    case "$1" in
-      start)
-        [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
-        do_start
-        case "$?" in
-|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
-) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
-        esac
-        ;;
-      stop)
-        [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
-        do_stop
-        case "$?" in
-|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
-) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
-        esac
-        ;;
-      status)
-           status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $?
-           ;;
-      restart|force-reload)
-        log_daemon_msg "Restarting $DESC" "$NAME"
-        do_stop
-        case "$?" in
-|1)
-            do_start
-            case "$?" in
-) log_end_msg 0 ;;
-) log_end_msg 1 ;; # Old process is still running
-                *) log_end_msg 1 ;; # Failed to start
-            esac
-            ;;
-          *)
-            # Failed to stop
-            log_end_msg 1
-            ;;
-        esac
-        ;;
-      *)
-        echo "Usage: $SCRIPTNAME {start|stop|status|restart| force-reload}" >&2
-        exit 3
-        ;;
-    esac</code>
 Save and close the file.
@@ Line 244: / Line 91: @@
 sudo service davmail start
 sudo update-rc.d davmail defaults</code>
 ===== Client Configuration =====
-Now that the server is running, you are ready to configure your E-mail clients. Create a new account, using the "manual" options of your E-mail client. Both the IMAP and SMTP server will be the domain name or IP address of your droplet, depending on what you used for the Common Name on your SSL certificate. The username for IMAP and SMTP will both be your E-mail address without the domain name. Example: Your E-mail is <bob@yourcompany.com>, so your username is bob. Make sure both IMAP and SMTP are set to use SSL/TLS and not STARTTLS.
+Now that the server is running, you are ready to configure your E-mail clients.
-You will get warnings from your E-mail clients because you are using a self-signed certificate. It is safe to accept the certificate in this case, because you are the one who created it.
+==== Mail setup ====
+Create a new account, using the "manual" options of your E-mail client. Both the IMAP and SMTP server will be the domain name or IP address of your droplet, depending on what you used for the Common Name on your SSL certificate. The username for IMAP and SMTP will both be your E-mail address without the domain name. Example: Your E-mail is <bob@yourcompany.com>, so your username is bob. Make sure both IMAP and SMTP are set to use SSL/TLS and not STARTTLS.
 Specific instructions for Thunderbird, Mac OSX, and iOS is available at [[http://davmail.sourceforge.net/|DavMail's website]].
@@ Line 254: / Line 104: @@
 You should now be able to send/recieve E-mail using your Microsoft Exchange E-mail account using open technologies!
+==== Calendar setup in Thunderbird ====
+In the thundebird calendar create a new networked calendar
+  Name: your-company
+  Location: https://your-company.tld:8443/users/your-name@your-company/calendar
+==== LDAP Directory setup in Thunderbird ====
-<HTML><ul></HTML>
+The following worked for me to connect to an exchange server through davmail.
-<HTML><li></HTML>
-By:
-Jesse TeKrony
-<HTML></li></HTML><HTML></ul></HTML>
-Upvote2
-   Subscribe  Subscribed [[javascript:void(0);|]]
-[[#| Share]]
-===== Spin up an SSD cloud server in under a minute. =====
+In the address book set up a new server
+  Name: your-company
+  Hostname: your-server
+  Base DN: ou=people
+  Port number: 636
+  Bind DN: your-name@your-company
-Simple setup. Full root access. Straightforward pricing.
-[[https://www.digitalocean.com/?utm_medium=community&utm_source=community_gencta&utm_campaign=needaserver&utm_content=how-to-setup-a-davmail-exchange-gateway-on-a-debian-7-vps|Deploy Server]]
-===== Related Tutorials =====
-  * [[community/tutorials/how-to-use-google-s-smtp-server|How To Use Google's SMTP Server]]
-  * [[community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-debian-9|How To Install and Configure Postfix as a Send-Only SMTP Server on Debian 9]]
-  * [[community/tutorials/how-to-install-and-configure-postfix-on-ubuntu-18-04|How To Install and Configure Postfix on Ubuntu 18.04]]
-  * [[community/tutorials/how-to-secure-roundcube-on-ubuntu-16-04|How To Secure Roundcube on Ubuntu 16.04]]
-  * [[community/tutorials/how-to-install-your-own-webmail-client-with-roundcube-on-ubuntu-16-04|How To Install Your Own Webmail Client with Roundcube on Ubuntu 16.04]]
-Ref: [[https://www.digitalocean.com/community/tutorials/how-to-setup-a-davmail-exchange-gateway-on-a-debian-7-vps]]
+Ref: Original by Jesse TeKrony [[https://www.digitalocean.com/community/tutorials/how-to-setup-a-davmail-exchange-gateway-on-a-debian-7-vps]]