Configure SSL Security Settings

SSL (secure sockets layer) protocol is the industry standard for securing Internet-based data transfer. SSL encrypts the data stream during transmission to prevent the exposure of sensitive information, such as passwords, to unauthorized parties.

Servers with SSL capability have been issued a public certificate and a private key by a certification authority. When a client, such as Techmail, communicates with an SSL-enabled server, the server sends the client its public certificate for verification. After the certificate has been validated to be current and signed by a trusted certification authority, the communication channel between the client and server is encrypted and can then be used to securely exchange information. The information remains encrypted as it travels between the two parties and is secure until the server or client decrypts it at the other end.

If you are hosting a POP mail account on your own mail server, configuring an SSL connection between the Techmail utility and the mail server protects the security of email messages as they are processed.

Note: SSL is not used for accessing POP accounts hosted by Oracle because the mail server and Techmail utility reside within the same secure network.

SSL settings let you specify the method used to establish the secure connection and set conditions on how strictly Techmail validates the server SSL certificate before connecting.

1. Click Configuration on the navigation pane.
2. Expand Site Configuration, and then double-click Mailboxes.
3. Click the mailbox you want to edit in the tree.
4. Click Security on the ribbon.
5. Enter field information to select the SSL method and set certificate verification requirements.

   SSL Security Settings

   Field	Description
   SSL Method	Click this drop-down list to select an SSL option that determines how Techmail retrieves messages from the mailbox.
   Disabled	Select this option to use regular POP3 (on port 110) without SSL encryption. This is the default setting. Note: The check boxes for accepting SSL certificates are grayed out if you select Disabled for the SSL method.
   Using POP3 SSL port	Select this option to use POP3 with SSL encryption on port 995.
   Using STLS command	Select this option to use the standard POP3 port (port 110) with SSL encryption. After the server greeting, the “Start TLS” command is used to switch to an SSL-encrypted connection.
   Accept Untrusted SSL Certificates	Select this check box to bypass verification that the mail server SSL certificate is signed by a trusted certificate authority.
   Accept Expired or Not Yet Valid SSL Certificates	Select this check box to bypass verification that the mail server SSL certificate is current and not yet expired.
   Accept SSL Certificates With Incorrect Host Name	Select this check box to bypass verification that the mail server host name is the same host specified in the SSL certificate.

6. Click Save.