To get to this page, to to Services → General → SSL Settings (VPOP3 Enterprise only)

This page lets you set the SSL settings used by VPOP3 when encrypting services. After making any changes to these settings you must restart VPOP3 for them to take effect.

If you are not using a certificate with VPOP3, then this can be left blank, otherwise you will need to at least complete the SSL Certificate Chain and SSL Private Key boxes.

 

The SSL Certificate Chain box should contain the full SSL certificate chain in PEM format. The certificate chain contains all the certificates from the VPOP3 SSL certificate through to the one signed by the well-known certificate authority installed in your browser/email client. Usually whoever you obtained the certificate from should be able to provide this for you. The VPOP3 SSL certificate should be the first certificate in the list, followed by all the others in order.

The SSL Private Key box should contain the SSL private key you generated when generating the CSR to be signed by your certificate authority. Again, this should be in PEM format.

If you purchase an SSL certificate from us, we will send you the certificate chain & private key in the appropriate form, with instructions.

The Validate SSL key/certificate box tells VPOP3 to check that the SSL Certificate Chain and SSL Private Key match and also that the chain is complete and goes back to a well-known certificate authority root. If you have a self-signed certificate you need to uncheck this box before Submitting the page.

The rest of the options on this page are for advanced users only! VPOP3 uses OpenSSL so you can use the OpenSSL documentation to determine settings if necessary - eg the format of the Allowed Ciphers string is documented here: https://www.openssl.org/docs/manmaster/apps/ciphers.html