Knowledge Base

SSL Certificate Installation in Qmail

If you have not yet created a Certificate Signing Request (CSR) and ordered your certificate, see
SSL Certificate CSR Creation | Qmail.

Installing your Qmail SSL Digital Certificate

1. Download your certificate files from your DigiCert Customer Account.

2. Create a combined .pem certificate file.

   Once you have downloaded your Certificate files from your DigiCert Web-PKI Customer Account, gather your new certificate files and the private key you generated when you created your CSR. Open a text editor and paste the contents of each key/certificate one after another in the following order:

3. 1. The Private Key (your_domain_name.key)
   2. The Primary Certificate (your_domain_name.crt)
   3. The Intermediate Certificate (DigiCertCA.crt)
   4. The Root Certificate (TrustedRoot.crt)

   
   Make sure that you include the beginning and end tags on each SSL Certificate.
   The result should look like this:

   -----BEGIN RSA PRIVATE KEY----- (Your Private Key: your_domain_name.key) -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- (Your Primary SSL certificate: your_domain_name.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your Intermediate certificate: DigiCertCA.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your Root certificate: TrustedRoot.crt) -----END CERTIFICATE-----

   
   Save the combined file as digicertpack.pem

4. Move this file to your /var/qmail/control/ directory.
5. Enable the ssl certificate for use with qmail either by renaming the file to that of the certificate that is already in use on that server, or by modifying the server configuration file to point to the newly created certificate.
6. To finish the installation process, restart the qmail server.