Date: Mon, 12 Jul 2004 20:52:34 -0500 From: Eric Crist <ecrist@secure-computing.net> To: freebsd-questions@freebsd.org Subject: Re: pop3s server? Message-ID: <200407122052.34384.ecrist@secure-computing.net> In-Reply-To: <8736B03E-D45B-11D8-A27F-000393681B06@lafn.org> References: <200407121801.34698.ecrist@secure-computing.net> <200407121816.01713.racerx@makeworld.com> <8736B03E-D45B-11D8-A27F-000393681B06@lafn.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Monday 12 July 2004 18:30, Doug Hardie wrote: > On Jul 12, 2004, at 16:16, Chris wrote: > > On Monday 12 July 2004 06:01 pm, Eric Crist wrote: > >> What can I use as a secure (SSL) pop3 server. I'm trying to > >> eliminate all > >> instances of passwords being transmitted to my network unencrypted. > >> Mail > >> is all that is left. I want to setup pop as a secure service, before > >> I > >> worry about fighting with sendmail and SSL. > > > > qpopper offers both SSL and APOP options. > > I use qpopper with SSL quite successfully. Its straight forward to > setup. However, getting the clients to work with that protocol can be > quite difficult. Eudora in particular has a broken TSL implementation > so you have to disable TSL and let it default to SSL before it will > work. Ok. Ignore my previous messages. I've got TSL working, but APOP is not working, even though the server says it supports it. I get an error about some DB not existing. Any ideas? Also, I followed the previously listed example to create a certificate. How do I use my existing web certificates? I think they're separate cert/key files. Do I need to combine these? Is it better to make a second cert/key for my mail server, only sign it with my CA cert? I've created my own CA that my users trust, I just don't do this often enough to remember the process. Almost there with this part! TIA -- Eric F Crist Keep your pecker hard and your powder dry, and the world WILL turn.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200407122052.34384.ecrist>