Configure secure connections for SMTP

For each organization, if its SMTP server requires a secure connection, follow these steps to import the SMTP server Certificate Authority's root certificate into the Java truststore of Codar. If necessary, contact your SMTP server administrator to obtain the SMTP server certificate.

If the SMTP server does not require a secure connection, you can omit this task.

Note If you have configured  Codar to be compliant with FIPS 140-2, you must substitute the Codar server truststore (for example, codar_server_truststore.p12) for the Java truststore (cacerts) and substitute the Codar server truststore password for the Java truststore password. See Create new keystore and truststore for secure communication for more information about the Codar server truststore and password.

  1. Open a command prompt and run the keytool utility with the following options to create a local trusted certificate entry for the SMTP server.

    Windows:

    "CSA_JRE_HOME\bin\keytool" -importcert -trustcacerts -alias smtp
    -keystore "CSA_JRE_HOME\lib\security\cacerts"
    -file <c:\certfile_name.cer> -storepass <password>

    Linux:

    CSA_JRE_HOME/bin/keytool -importcert -trustcacerts -alias smtp
    -keystore CSA_JRE_HOME/lib/security/cacerts
    -file </tmp/certfile_name.cer> -storepass <password>

    <c:\certfile_name.cer> on Windows or </tmp/certfile_name.cer> on Linux is the path and name of the Certificate Authority's root certificate for the LDAP server. The file extension may be .cer rather than .crt. You can also use a different value for -alias.

  2. At the prompt to import the certificate, type Yes.
  3. Press Enter.

  4. Restart Codar service, see Restart Codar.

Send Help Center feedback