similar to: SSL Client Certificate Support

Hello! Could somebody give some feedback on this configuration: - OpenBSD box with local ssh users. - /home directory mounted with nosuid,noexec. - postfix dropping mail in /home/username/mail/INBOX, with the UID/GID of the user. - dovecot: valid_chroot_dirs = /home default_mail_env = mbox:/home/%u/mail/:INBOX=/home/%u/mail/INBOX Are there any obvious ways for a local user to help

Hello, I wonder if there is some possibility to force dovecot to use more than one ssl certificate. I would like to use a few certficates: one per IP We are hosting many different domains and I had to use stunnel to ensure encrypted connection for our clients using different certificates. But stunnel isn't a good solution and sometimes I need to restart stunnels because of some of it's

Hi Thomas, El 18/12/2014 22:25, Thomas B. R?cker <thomas at ruecker.fi> escribi?: > > On 12/18/2014 08:54 PM, Xabier Oneca -- xOneca wrote: >> >> Hello, Thomas, >> >> El 18/12/2014 21:35, Thomas B. R?cker <thomas at ruecker.fi> escribi?: >> > >> > On 12/18/2014 08:29 PM, Xabier Oneca -- xOneca wrote: >> > > >> > >

Hello - I'd like to encrypt rsync traffic over the wire, and for various reasons, I can't use ssh. I'd like to use SSL. Having spent the last day or so trying to wrap my brain around what that's going to take, I'm wondering if anyone has tried this before? Is it un-doable for one reason or another? TIA, -justinb

Hi, Can the Icecast stream be served over an ssl (https) connection? If so, can you please tell me how to accomplish this? Thanks, Daelynn. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.xiph.org/pipermail/icecast/attachments/20141218/185fa162/attachment.htm

hello, first sorry for my poor english I'm doing the migration from UW-imap to Dovecot I have two question about the authentification in the imaps (port 993) process In dovecot .conf I can enable (or disable) the diff?rent port (pop, pops, imap, imaps) and may be restrict the access to the serveur with the ip adresse. Can I configure dovecot in imaps so it permit the access if the

Hi, i've set up a little mailserver for my homeoffice, and after some problems everything works fine for me, I've some virtual users which get their mail delivered via getmail, and I can access my mails from my windows mailclient. The only issue I'm still facing is, that I don't like to run getmail as a cronjob that connects to my online mailboxes every minute or so,

Hello, I have liquidsoap streaming to icecast with url authentication and everything works as it should. However, I enabled SSL in icecast to enhance security and now the source doesn't connect. In the error.log I see [2015-01-14 11:49:11] DBUG slave/_slave_thread checking master stream list [2015-01-14 11:49:13] DBUG client/client_read_bytes reading from connection has failed

No I haven't because I thought SSL would be only enabled for the listener auth, not source auth. So apparently if I want listener SSL the source must support SSL also ? That sounds kind of unnecessary and preferably should be an option. If this is not possible I guess stunnel is the only way to go. Thank you very much. On Wed, Jan 14, 2015 at 1:46 PM, "Thomas B. R?cker" <thomas

I'm finding even less on rsync and SSL. I would have imagined someone would have done something with this already, but apparently not. So I guess I need to ask and see for sure: has anyone worked on issues of using rsync via SSL, such as with stunnel? I want to have encrypted access, either anonymous or authenticated, but without granting any SSH access to anyone (e.g. the rsync

Hi, I would like to achieve the following with my dovecot server: - listen von FQDN 'mail.foo.example.com'/IP 'A' for imaps and pop3s with an SSL certificate for 'mail.foo.example.com' - listen von FQDN 'mail.bar.example.com'/IP 'B' for imaps and pop3s with an SSL certificate for 'mail.bar.example.com' I stumbled over a posting by Timo made

I am in the network that is behind the Zscaler firewall. Virtually all ports except 80 and 443 are closed. ssh through any of ports 80 and 443 is disallowed based on protocol content analysis. It would be nice if OpenSSH would have some features that would allow the user to break out of such network. I suggest that OpenSSH adds the SSL tunneling feature: 1. The server would have the

I'd like to host multiple domains though a central dovecot proxy - however, I need to present different certs to different hostnames (which are on different IPs). I can't see a way to this in the documentation, is it possible? thanks, Ian

Can I enable STARTTLS/SSL on the LMTP listener in Dovecot 2.1.x? service lmtp { unix_listener lmtp { } inet_listener lmtp { address = * port = 24 --> ssl=yes } } -- Ralf Hildebrandt Gesch?ftsbereich IT | Abteilung Netzwerk Charit? - Universit?tsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30

I was just thinking how they could be easily supported. This would work, right? : imap stream tcp nowait root /usr/sbin/tcpd /usr/local/libexec/dovecot/imap-login imaps stream tcp nowait root /usr/sbin/tcpd /usr/local/libexec/dovecot/imap-login --ssl imap-login would try to connect to master process using some named socket. If it couldn't, it would create the master process itself. Master

Hello! I was wondering if it possible now (or possible to implement something like that in the future) that the daemon does only accept connections if a specific file is present at the moment of the connection request. I want to achieve that a connection to my server is only possible if I plug in e.g. an USB stick (which would contain the file) and is always rejected if that

Hi, we have a strange problem: two of our users informed me, that they aren't able to send word-.doc-files anymore while othe attachements work fine. The e-mail gets deliverd, but the attachement is dropped. This happens using the latest thunderbird 1.5.x and mac os x. The e-mail is also not saved in the send-drawer. If the users send the same e-mail to the same recepient using an other

How do I configure dovecot-2.0.x to present a client SSL certificate when proxying? If dovecot on server1.example.com has: passdb { driver = static args = proxy=y host=server2.example.com nopassword=y ssl=yes } and dovecot on server2.example.com has: ssl_verify_client_cert = yes auth_ssl_require_client_cert = yes then when a client connects to server1 and authenticates, a connection is

Hello, I intend to use maildir Quota for measurement only, not for applying restrictions. Therefore I defined rather high values. That's working as expected. Nevertheless it's not useful, because the recalculation time is to high. This takes some minutes for my own mailaccount with 250.000 mails on a NFS storage. This would be to bad, but whilst this time, the Mailclient hangs. Probably

On 4.2.2020 13.46, Heiko Schlittermann wrote: > Hi, I'm resending this message, still hoping for an answer. > > Hello, > > does dovecot support tls-on-connect for AF INET based auth-client > sockets? > > Rationale behind my question: > > Exim can use the Dovecot auth-client socket to delegate the > SMTP-AUTH authentication to Dovecot. > > Currently Exim