NethServer Version: NS7
Module: nethmail, active diectory
Hi I’m in the process of setting up a nethserver mail server to replace an ageing exchange 2010 server and would like to be able to export the self signed certificiate so that I can then import it into the DC rtusted root certificates under group policy.
Does anyone have any tips for how to export it?
The certificate file is stored on your server at /etc/pki/tls/certs/localhost.crt. You can copy it from there and import it wherever you choose. However, seriously consider whether you can use Let’s Encrypt to obtain a trusted cert for your server.
Hmm I’ll take a look at Let’s Encrypt thanks.
If your Neth box is internal and not directly accessible from the Internet, you can use DNS validation to get a cert. I’ve written up two different ways you could accomplish this:
https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_for_internal_servers
https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_acme-dns
That’s brilliant thanks