search for: cacertif

...> ? } > ? mailbox "Sent Messages" { > ??? special_use = \Sent > ? } > ? mailbox Trash { > ??? special_use = \Trash > ? } > ? prefix = > } > plugin { > ? sieve = file:~/sieve;active=~/.dovecot.sieve > } > protocols = imap > ssl_ca = /etc/ssl/certs/cacertificate.crt > ssl_cert = </etc/ssl/certs/certificate.crt > ssl_key = # hidden, use -P to show it > userdb { > ? args = uid=vmail gid=vmail home=/var/vmail/%d/%n allow_all_users=yes > ? driver = static > } When I ran these settings I would get an error that read > Nov? 8 17:00...

Hello, we're running RC2 and seeing a problem with the way SSL certs are handled by Dovecot. We've set ssl_verify_client_cert=yes and ssl_require_valid_client_cert=no. Using this setup we get (rather interesting) log entries like these: Jul 31 11:21:23 dev dovecot: imap-login: Invalid certificate: <user cert> Jul 31 11:21:23 dev dovecot: imap-login: Invalid certificate: <CA

...to use dovecot as imap-proxy with a passwd-like userdb, ssl_require_client_cert and ssl_username_from_cert, it "binds" the emailuser to the clientcertificate, a clientcert. can access only the account from the userdb) in order to use it, the CAfile must be a file which contains the CAcertificate (pem format) followed by the CRL (also in pem format). (servercert and the clientcerts are signed with a self-signed rootcert) there are some issues with the patch: a) it needs openssl > 0.9.7 for the CRL checking b) ssl_verify_client_cert now returns 0 in case of an invalid cert. was th...

...p-server.pem -days 3650 ( where Common Name = ldap.yourdomain.tld ) edit /etc/ldap/slapd.conf put these below the other line, the order of schema files must be correct. insert the line "include /etc/ldap/schema/samba.schema" add these line before the database definition TLSCACertificateFile /etc/ldap/ssl/ldap-server.pem TLSCertificateFile /etc/ldap/ssl/ldap-server.pem TLSCertificateKeyFile /etc/ldap/ssl/ldap-server.pem Now its time for the ldap database configuration for samba example of the /etc/slapd.conf ( database 1 configuration ) ##############################...