• Article for your preferred language does not exist. Below is international version of the article.

Article ID: 118918, created on Nov 29, 2013, last review on Sep 15, 2016

  • Applies to:
  • Plesk Automation

Symptoms

How to verify that SSL for IMAP/POP3/SMTP works and proper certificate is installed?

Resolution

Note: You can find out how to install certificates in #118917 article.

To verify SSL please use the following commands:

  1. IMAP via SSL uses 993 port by default:

    a. connect to mail server using openssl:

    openssl s_client -showcerts -connect mail.example.com:993
    

    b. Check output and make sure that valid certificate is shown:

    Server certificate
    subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
    issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
    

    c. Make sure that you received IMAP server response:

    * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA AUTH=CRAM-MD5 AUTH=PLAIN IDLE ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2004 Double Precision, Inc.  See COPYING for distribution information.
    
  2. POP3 via SSL uses 995 port by default:

    a. connect to mail server using openssl:

    openssl s_client -showcerts -connect mail.example.com:995
    

    b. Check output and make sure that valid certificate is shown:

    Server certificate
    subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
    issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
    

    c. Make sure that you received POP3 server response:

    +OK Hello there. <1793.1385684315@localhost.localdomain>
    
  3. SMTP via SSL uses 465 port by default:

    a. connect to mail server using openssl:

    openssl s_client -showcerts -connect mail.example.com:465
    

    b. Check output and make sure that valid certificate is shown:

    Server certificate
    subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
    issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2
    

    c. Make sure that you received SMTP server response:

    220 mail.example.com ESMTP Postfix
    

Search Words

install TLS postfix

ceck SSL certiticate

SSL for IMAP/POP3/SMTP

Unable to check the availability of registered hosts in PPA

SSL routines:SSL3_GET_RECORD:wrong version number

test SSL

ssl pop

connect:errno=61

e0aff7830fa22f92062ee4db78133079 caea8340e2d186a540518d08602aa065

Email subscription for changes to this article
Save as PDF