tls_*_cert in 2.2.3

Ken Murchison ken at oceana.com
Wed Feb 4 07:24:57 EST 2004


Ian G Batten wrote:

> I wiped out access to my Cyrus store for my father and my wife which I
> went to 2.2.3.  It turned out that the problem was that when they
> connected with TLS (I didn't test that, sadly) imapd immediately exited
> with ``imaps: required OpenSSL options not present''.
> 
> I traced through the source to tls_enabled() in imap/tls.c, which was
> returning 0.  I was successfully using split certificates for POP, IMAP
> and so on under 2.1.16:
> 
> tls_imap_cert_file: /var/imap/certs/imap-cert.pem
> tls_imap_key_file: /var/imap/certs/imap-private.pem
> tls_pop3_cert_file: /var/imap/certs/pop-cert.pem
> tls_pop3_key_file: /var/imap/certs/pop-private.pem
> tls_lmtp_cert_file: disabled
> tls_lmtp_key_file: disabled

Try <servicename>_tls_cert_file and <servicename>_tls_key_file where 
<servicename> is the name of the service from cyrus.conf (note that this 
is NOT the name of the binary).

-- 
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp




More information about the Info-cyrus mailing list