7.1

PrintShop Mail Web and HTTPS
The PrintShop Mail Web installer gives you the option to support both HTTP and HTTPS connections. If you do not install
HTTPS during the installation you can enable it afterwards.
What is HTTPS?
HTTPS (Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a Web protocol used to encrypt and
decrypt user page requests as well as the pages that are returned by the Web server.
SSL is an open, non proprietary protocol that Netscape has proposed as a standard to the World Wide Consortium (W3C).
HTTPS is not to be confused with S-HTTP, a security-enhanced version of HTTP developed and proposed as a standard by
EIT.
When you visit a web site with a Uniform Resource Locator (URL) that starts with https:// your browser's HTTPS layer will
encrypt information send from the client to the server. The acknowledgment you receive from the server will also travel in
encrypted form, arrive with an https:// URL, and be decrypted for you by your browser's HTTPS sublayer.
HTTPS and SSL support the use of X.509 digital certificates from the server so that a user can authenticate the sender.
SSL certificates
When you enable HTTPS you have to obtain a ssl certificate from a certificate authority like Verisign (http://ww-
w.verisign.com), this certificate and the private key must be placed in /apache/certificate. PSW comes with a sample cer-
tificate, which will work on PrintShop Mail Web servers that can be reached through the URL https://localhost. For any other
URL the supplied certificate will generate security warnings when an user connects to the PrintShop Mail Web server.
Most certificate authorities have detailled information on their web site on how to obtain, create and install certificates. The fol-
lowing steps will help you generating a Certificate Signing Request (CSR) and need to be performed on the PrintShop Mail Web
server.
1. Download and install Openssl. Openssl can be found at the following location: http://www.slproweb.com/
2. Navigate to the OpenSSL folder and launch the OpenSSL.exe located in the bin folder
3. Enter the following command to generate a private key:
openssl genrsa -out yourdomainname.key 1024
The example above generates a genrsa encrypted key. These settings may differ between certificate providers.
4. Enter the following to create the CSR:
openssl req -new -key yourdomainname.key -out yourdomainname.xsr
5. Read the instructions and completed the information on screen (use YOUR details).
You are about to be asked to enter information that will be
incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name
or a DN. There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:NL
State or Province Name (full name) [Some-State]:Zuid Holland
©2010 Objectif Lune Inc - 47 -