cyrus and ssl

[Mark Henshall]

:

> Troy McKinnon wrote:
> > This is most likely a ssl configuration issue but I would really
> appreciate
> > any help on this.
> > 
> > I followed the setup as per "  luc's  " how to on postfix-cyrus
> > 
> > netstat shows me that my server is running:
> > 
> > tcp        0      0 0.0.0.0:20000           0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:2401            0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:15              0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:2000            0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:5432            0.0.0.0:*               LISTEN
> > tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:25              0.0.0.0:*               LISTEN
> > tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN
> > tcp        0      0 127.0.0.1:8005          :::*                    LISTEN
> > tcp        0      0 :::8009                 :::*                    LISTEN
> > tcp        0      0 :::8080                 :::*                    LISTEN
> > tcp        0      0 :::53                   :::*                    LISTEN
> > tcp        0      0 :::22                   :::*                    LISTEN
> > 
> > 
> > when I connect to the server via OULOOK express and ssl encrypt it says it
> > is an untrusted domain, and if I want to download the cert.
> > (I created my own cert as per howto)... and once downloaded I get
> connection
> > refused error.
> -have you tried another client (e.g. Thunderbird 
> (http://www.mozilla.org/) and are you getting the same error(s)?
> 
> - have a look at your logfiles (what kind of errors are listed there?)
> 
> - what exactly does outlook express tell you? Does it provide an 
> errorcode (like 800ccc0e or similar)?
> 
> - to solve your problem with the untrusted certificate: either you let 
> your certificate sign by an existing certificate authority (eg versigin) 
> - or you set up your own certificate authoritiy and sign your own 
> certificates (thats the cheaper way :-), but you then have to install 
> the ca-certificate on your system since it isn't built by microsoft ;-)
> How to do that: look at the "SSL Certificates HOWTO" (google will find 
> it ;-)
> > 
> > Regular IMAP or POP3 works fine but I would like to disable that for ssl.
> > 
> > Any ideas what I have done wrong?
> > 
> > Thanks
> > 
> > Troy
> > 
> > 
> regards
> 
> chris
> 
> 
This is a pretty good site - how to set up and install CA and Client
certificates:

http://www.tldp.org/HOWTO/SSL-Certificates-HOWTO/x160.html