NAME

pmx-force-ssl-mode - configures SSL settings of the Postfix and Apache services for pmx.


SYNOPSIS

pmx-force-ssl-mode [--services={'postfix' | 'sendmail' | 'smtp' | 'apache' | 'all'}] --Parameter[=value]


DESCRIPTION

``pmx-force-ssl-mode'' command need to execute from root.

pmx-force-ssl-mode looks through the configuration of the selected service and updates it, if required.

If Apache service is selected pmx-force-ssl-mode checks the required certificates. It can also generate a new certificate using the pmx-cert tool (with default configuration).

service
The services parameter defines which services would be affected. Possible values: 'Postfix'/'Sendmail'/'smtp', 'Apache' or 'All'. Default is ‘All’.

ssl3
The SSLv3 parameter enables SSLv3 Protocol. If not present, SSLv3 will be disabled.

tls
tls parameter defines the TLS versions which should be enabled. Value could be 'All' or a comma-separated list of ``TLSV1.0'',``TLSv1.1'' and ``TLSv1.2''. If present, default is 'All'.

force
If present, the pmx-force-ssl-mode wouldn't ask for any confirmation.

nocheck_certs
If present, no certification check will be done (even if Apache service had been selected).

check_certs
If present, certification checks are forced (even if no services are selected ).


CERTIFICATE GENERATION OPTIONS

nocert
This flag skips generation of certificates.

certpath
Configures the path to store certificates. The default is'/opt/pmx6/sendmail/etc/mail/certs/'

bits
Configure the key length in bits. Available options: 1024, 2048, 4096. The default is 2048.

days
Configures the number of days for which the generated certificate will be valid. The default is 365 days.

dns
Configures the DNS name for the generated certificate. The DNS name is the fully qualified domain name of the server that is handles the HTTPS requests. If this is incorrect, clients issue a warning when connecting to the server.

email
Configure the email address to display for the generated certificate.

ip
Configure the IP address to display for the generated certificate.

url
Configure the URL to display for the generated certificate.


COPYRIGHT

Copyright (C) 2000-2018 Sophos Group. All rights reserved. Sophos and PureMessage are trademarks of Sophos Plc and Sophos Group.