pmx-force-ssl-mode - configures SSL settings of the Postfix and Apache services for pmx.
pmx-force-ssl-mode [--services={'postfix' | 'sendmail' | 'smtp' | 'apache' | 'all'}] --Parameter[=value]
``pmx-force-ssl-mode'' command need to execute from root.
pmx-force-ssl-mode
looks through the configuration of the selected service
and updates it, if required.
If Apache service is selected pmx-force-ssl-mode
checks the required certificates. It can also generate a new certificate using the pmx-cert tool
(with default configuration).
- service
-
The services parameter defines which services would be affected. Possible values: 'Postfix'/'Sendmail'/'smtp', 'Apache' or 'All'. Default is ‘All’.
- ssl3
-
The SSLv3 parameter enables SSLv3 Protocol. If not present, SSLv3 will be disabled.
- tls
-
tls parameter defines the TLS versions which should be enabled. Value could be 'All' or a comma-separated list of ``TLSV1.0'',``TLSv1.1'' and ``TLSv1.2''. If present, default is 'All'.
- force
-
If present, the pmx-force-ssl-mode wouldn't ask for any confirmation.
- nocheck_certs
-
If present, no certification check will be done (even if Apache service had been selected).
- check_certs
-
If present, certification checks are forced (even if no services are selected ).
- nocert
-
This flag skips generation of certificates.
- certpath
-
Configures the path to store certificates. The default is'/opt/pmx6/sendmail/etc/mail/certs/'
- bits
-
Configure the key length in bits. Available options: 1024, 2048, 4096. The default is
2048.
- days
-
Configures the number of days for which the generated certificate
will be valid. The default is 365 days.
- dns
-
Configures the DNS name for the generated certificate. The DNS name is
the fully qualified domain name of the server that is handles the
HTTPS requests. If this is incorrect, clients issue a warning
when connecting to the server.
- email
-
Configure the email address to display for the generated certificate.
- ip
-
Configure the IP address to display for the generated certificate.
- url
-
Configure the URL to display for the generated certificate.
Copyright (C) 2000-2018 Sophos Group. All rights reserved. Sophos and
PureMessage are trademarks of Sophos Plc and Sophos Group.