pop3s server?

Eric Crist ecrist at secure-computing.net
Mon Jul 12 18:48:46 PDT 2004


On Monday 12 July 2004 18:30, Doug Hardie wrote:
> On Jul 12, 2004, at 16:16, Chris wrote:
> > On Monday 12 July 2004 06:01 pm, Eric Crist wrote:
> >> What can I use as a secure (SSL) pop3 server.  I'm trying to
> >> eliminate all
> >> instances of passwords being transmitted to my network unencrypted.
> >> Mail
> >> is all that is left.  I want to setup pop as a secure service, before
> >> I
> >> worry about fighting with sendmail and SSL.
> >
> > qpopper offers both SSL and APOP options.
>
> I use qpopper with SSL quite successfully.  Its straight forward to
> setup.  However, getting the clients to work with that protocol can be
> quite difficult.  Eudora in particular has a broken TSL implementation
> so you have to disable TSL and let it default to SSL before it will
> work.

Ok.  Ignore my previous messages.  I've got TSL working, but APOP is not 
working, even though the server says it supports it.  I get an error about 
some DB not existing.  Any ideas?

Also, I followed the previously listed example to create a certificate.  How 
do I use my existing web certificates?  I think they're separate cert/key 
files.  Do I need to combine these?  Is it better to make a second cert/key 
for my mail server, only sign it with my CA cert?  I've created my own CA 
that my users trust, I just don't do this often enough to remember the 
process.

Almost there with this part!

TIA
-- 
Eric F Crist

Keep your pecker hard and your powder dry, and the world WILL turn.


More information about the freebsd-questions mailing list