Using SSL with IMAP Clients

Many popular IMAP clients can be configured to use SSL when connecting to a SSL enabled IMAP server. This encrypts the connection between the client and the server so that a users email password can not be easily compromised. SSL is available on all three IMAP servers – imapserver1, imapserver2, and imapserver3. Sample configuration for some popular clients is presented here: Outlook Express, Mozilla Thunderbird, Netscape Communicator, and Pine

Microsoft Outlook Express (v6.0) In Outlook Express start the client and click on Tools, Accounts Select your IMAP account and click on Properties. Select the Advanced tab Now select the SSL checkbox for Incoming mail (IMAP). The port number should change from 143 to 993. Click OK and close to save your settings. Restart Outlook Express. Connect to the IMAP server as normal. There is no lock symbol demonstrating that you are using SSL. You can confirm this with the NETSTAT command or by using an freeware GUI application such as Active Ports. netstat -a\|grep 993 TCP yoyo:1269 imapserver1.fnal.gov:993 ESTABLISHED This shows that my client is talking to port 993 on the IMAP server. Windows NT/2000 users that don't have grep can use find. netstat -a\|find "993" TCP yoyo:1269 imapserver1.fnal.gov:993 ESTABLISHED
Mozilla Thunderbird (v1.x) Start the client and click on Tools, Account Settings Then click on Server Settings Select Use Secure Connection. The port number should change to 993. Click on OK and restart the client. Connections to the IMAP server will now use SSL.
Netscape Communicator (v4.77) In Netscape start the client and click on Edit, Preferences. Select Mail Servers under Mail & Newsgroups. Click on Edit Select the IMAP tab Check the box next to Use secure connection (SSL) and click on OK as necessary to get back to the client. Now when reading mail note the lock symbol at the bottom of the client. This symbol means that the connection between the client and server has been made using SSL.
Pine (v4.3 or later) Pine added support for SSL starting in v4.3. It has to enabled at the time it is built. To enable SSL simply edit your .pinerc file and change the mailbox paths as shown: inbox-path={imapserver1.fnal.gov/ssl}inbox Anywhere you have a path with the IMAP server that you are using add the /ssl to the server name.
Reported problems A few problems has been reported with certain clients. Check the FAQ / problem page before reporting any unusual behavior that you may be experiencing with your IMAP client. Problems should be reported to the helpdesk by sending mail to helpdesk@fnal.gov or by calling extension 2345.

Using SSL with IMAP Clients

Many popular IMAP clients can be configured to use SSL when connecting to a SSL enabled IMAP server. This encrypts the connection between the client and the server so that a users email password can not be easily compromised.

SSL is available on all three IMAP servers – imapserver1, imapserver2, and imapserver3.

Sample configuration for some popular clients is presented here:

Outlook Express, Mozilla Thunderbird, Netscape Communicator, and Pine

Microsoft Outlook Express (v6.0)

In Outlook Express start the client and click on Tools, Accounts

Select your IMAP account and click on Properties.

Select the Advanced tab

Now select the SSL checkbox for Incoming mail (IMAP). The port number should change from 143 to 993.

Click OK and close to save your settings. Restart Outlook Express. Connect to the IMAP server as normal. There is no lock symbol demonstrating that you are using SSL. You can confirm this with the NETSTAT command or by using an freeware GUI application such as Active Ports.

netstat -a|grep 993
TCP yoyo:1269 imapserver1.fnal.gov:993 ESTABLISHED

This shows that my client is talking to port 993 on the IMAP server. Windows NT/2000 users that don't have grep can use find.

netstat -a|find "993"
TCP    yoyo:1269              imapserver1.fnal.gov:993  ESTABLISHED

Mozilla Thunderbird (v1.x)

Start the client and click on Tools, Account Settings

Then click on Server Settings

Select Use Secure Connection. The port number should change to 993. Click on OK and restart the client. Connections to the IMAP server will now use SSL.

Netscape Communicator (v4.77)

In Netscape start the client and click on Edit, Preferences.

Select Mail Servers under Mail & Newsgroups. Click on Edit

Select the IMAP tab

Check the box next to Use secure connection (SSL) and click on OK as necessary to get back to the client.

Now when reading mail note the lock symbol at the bottom of the client.

This symbol means that the connection between the client and server has been made using SSL.

Pine (v4.3 or later)

Pine added support for SSL starting in v4.3. It has to enabled at the time it is built.

To enable SSL simply edit your .pinerc file and change the mailbox paths as shown:

inbox-path={imapserver1.fnal.gov/ssl}inbox

Anywhere you have a path with the IMAP server that you are using add the /ssl to the server name.

Reported problems
A few problems has been reported with certain clients. Check the FAQ / problem page before reporting any unusual behavior that you may be experiencing with your IMAP client. Problems should be reported to the helpdesk by sending mail to helpdesk@fnal.gov or by calling extension 2345.

last modified 05/24/2005 email Fermilab


Security, Privacy, Legal