Vincent Jaussaud
2004-Nov-09 13:51 UTC
[Dovecot] dovecot with different POP3S / IMAPS Certs
Hi, I'm new to dovecot, but actually planning to switch a wide WU-IMAP/POP installation to dovecot. With WU-IMAP, a different certificate can be used by pop3s and imaps, allowing both server to be reachable through different hostnames,without SSL complaints on the client side; this is mostly used for scalability. I'm trying to do the same thing with dovecot; that is having dovecot using a different certificate for it's pop3s instance and imaps instance. Unfortunately, in dovecot configuration file, only one certificate can be set; used by both pop3s / imaps. Any idea of the best way to handle this ? Thanks ! Vincent. -- Vincent Jaussaud Kelkoo.com Security Manager email: tatooin at kelkoo.com GPG key: 1024D/3BFE3FC7 2002-02-07 "Those who desire to give up freedom in order to gain security will not have, nor do they deserve, either one." -- President Thomas Jefferson. 1743-1826 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20041109/7fbd444f/attachment-0001.bin>
On 9.11.2004, at 15:51, Vincent Jaussaud wrote:> With WU-IMAP, a different certificate can be used by pop3s and imaps, > allowing both server to be reachable through different > hostnames,without > SSL complaints on the client side; this is mostly used for scalability. > > I'm trying to do the same thing with dovecot; that is having dovecot > using a different certificate for it's pop3s instance and imaps > instance. > > Unfortunately, in dovecot configuration file, only one certificate can > be set; used by both pop3s / imaps.With 0.99.x it's not possible, so you'd have to run two Dovecot instances. With 1.0-tests I think this should work: protocol pop3 { ssl_cert_file = ... } protocol imap?{ ssl_cert_file = ... } -------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type: application/pgp-signature Size: 186 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20041112/7c306d26/attachment-0001.bin>