Knowledge Base

Using IMAP for collaboration with SSL

By Carmen posted 07-10-2015 13:08

  
Note: This document is intended for Jama Software instances using Jama Software 2015.5 and below.

If your e-mail server uses SSL, to enable collaboration email with IMAP you'll need to get your server's SSL certificate and place it in Java.

You should be able to get the certificate from your e-mail administrator. It can be retrieved either from a machine that has OpenSSL installed or a machine that can connect to that e-mail server, by using the command OpenSSL s_client -connect [mailhost:imapport].

The following set of instructions will help you to import the target server's certificate to the application's keystore.

  1. Copy the CA cert from your IMAP server to a new location.

  2. Use a program such as Notepad++ to open the file.

  3. Remove any content before "BEGIN CERTIFICATE" and after "END CERTIFICATE", so it will look similar to:

-----BEGIN CERTIFICATE----VQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1NMGgxCzAJBgNVBAYTAlVTMRMwEQYLfrTi
MGgxCzAJBgNVBAYTAlVTMRMwEQYD29nbGUgSW5jMRcwFQYDVQQDEw5pbWFw6tfreRIyOt
LmdtYWlsLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAqfPyPSEHpfzvegu78Oj
Xx+9zGUxoxcOXFrGKCbZ8bfUd8JonC7rfId32t0gyAoLCgM6eU4lN05VenNZUoChvfrHYEEdr2t
L/nrX+ApdMQv9UFV58aYSBMU/pMmK5GXansbXlpHao09Mc8eur2xV+4cnEtxUvzp65RTfrewl
9nbGUgSW5jMRcwFQYDVQQDEw5pbWFwLmdtYWlsLmNvbTCBnzANBgkqhkiG9w0BAouytt
-----END CERTIFICATE-----

  4. Save this as a .crt file.

  5. To import your CA certificate into Java, run the following command from the command line as Administrator:

keytool -import -alias root -keystore [Java installation folder]\lib\security\cacerts -trustcacerts -file [filename.crt]

Note that [filename.crt] can be [path/to/filename.crt] depending on the file's location. The default password for keytool should be “changeit”. 

  6. You will be asked to Trust the Certificate. 

You will get the confirmation that the certificate was added to the keystore.

#installation
0 comments
40 views