Hello-

I've really liked about everything I've read on the Binc website about
how Binc has been designed, its goals, and the general attitude.  It
seems like exactly what I was looking for, and I really like C++.  :-)

First a little background.  I'm running a Slackware 8.1 box with
Postfix.  I'm not switching MTAs, but want to get away from mbox... it's
starting to give me grief.  I keep hearing bad things about Courier IMAP
and don't want to touch Cyrus right now.  That pretty much limits me to
Binc as far as I've seen.  As far as I can tell, this funky Maildir++
stuff is totally compatable with regular Maildir, right?  I can tell
Postfix to work with a Maildir and my users can tell procmail to work
with a maildir, and I wont' run in to any problems... right?  :-)

The box is a Slackware 8.1 box with GCC 2.95.  I couldn't get it
compiled on there, even with GCC 3.2.1, so I compiled it on my Gentoo
box, statically, and copied the binaries over.  They seem to be working
fine, I think.  Slackware does *not* use PAM...it doesn't seem PAM is
required, but I just want to make sure it's known there's no PAM
involved.

I copied over the config file, made a .pem (BTW, as far as I've seen, RH
is the only one who does the cd /usr/share/ssl/certs && make), put them
in /usr/etc, added lines to /etc/inetd.conf, HUP'd inetd, and tried to
connect.  No go.  :-\

It's like it doesn't see the configuration file.  I modified it to call
tcpd first:

imap2 stream tcp nowait root /usr/sbin/tcpd /usr/bin/bincimap-up 
--conf=/usr/etc/bincimap.conf --logtype=syslog -- /bin/checkpassword /usr/bin/bincimapd

And now I'm able to at least login plaintext like.

However, now I want to get SSL/TLS working so I can safely open it up to
the web.  Here I'm definitely running in to problems.

Let's start with TLS... it seems to be most common/easiest?

I don't know how to do TLS interactively from openssl or telnet, so
unfortunately have to rely upon kmail, the only mail client I have open
at the time to work with...

When I tell KMail to use TLS authentication, it pops up an error box
that says "Starting TLS failed." and my syslog shows:

Dec 14 22:49:09 linuxbox bincimap-up[31611]: Client connected to Binc IMAP from ?

...so I'm basically not getting any useful output. :-(

I don't know where to go from there.

Next up... SSL...

I compiled the thing statically so SSL should all be static and not rely
on the server's SSL stuff, right?  I hope so, anyway; Slackware 8.1's
SSL doesn't include as many ciphers as other distros (it was fixed in
9.0, I understand).

When I connect to the SSL port (993, same inetd entry as above except
for "--ssl " before the --conf) KMail errors out with "could not connect
to host mail.axpr.net" and my syslog shows:

Dec 14 22:51:25 linuxbox bincimap-up[31626]: Error initializing Binc IMAP: SSL 
negotiation failed: SSL error: cipher list undefined

The bincimap.conf file can be found at http://rob.axpr.net/bincimap.conf
FWIW.

Any thoughts?

I suppose the purposes of this email are:

1)  Verify I can use Postfix and regular Maildir boxes with Binc
2)  Figure out how to get TLS and SSL working
3)  Provide a few pointers for future googlers running Slackware/Postfix

Thanks guys.  :-)

Rob

Reply via email to