Good Morning,

according to one of our bugs in our bugzilla (bugzilla.novell.com #241937) the 
default path to the ssl .pem files is wrong.

<quote--
Courier in default configuration generates certificates for courier-pop3-ssl
and courier-imap-ssl in /usr/share/courier-imap/

/etc/courier/pop3d-ssl{,.dist} contains
    TLS_CERTFILE=/usr/share/courier-imap/pop3d.pem

/etc/courier/imapd-ssl{,.dist} contains
    TLS_CERTFILE=/usr/share/courier-imap/imapd.pem

/usr might be mounted read-only according to FHS, and is not expected to
contain variable or machine-specific data.

Please change the default paths for the certificates to /etc/courier/*.pem.
--endquote>

This diff fix this issue:
--- imap/imapd-ssl.dist.in
+++ imap/imapd-ssl.dist.in
@@ -153,7 +153,7 @@
 # servers, and is optional for SSL/TLS clients.  TLS_CERTFILE is usually
 # treated as confidential, and must not be world-readable.
 #
[EMAIL PROTECTED]@/imapd.pem
[EMAIL PROTECTED]@/imapd.pem
 
 ##NAME: TLS_TRUSTCERTS:0
 #
--- imap/pop3d-ssl.dist.in
+++ imap/pop3d-ssl.dist.in
@@ -140,7 +140,7 @@
 # servers, and is optional for SSL/TLS clients.  TLS_CERTFILE is usually
 # treated as confidential, and must not be world-readable.
 #
[EMAIL PROTECTED]@/pop3d.pem
[EMAIL PROTECTED]@/pop3d.pem
 
 ##NAME: TLS_TRUSTCERTS:0
 #

Greetings
Michael
-- 
----------------------------
| Michael Skibbe           |
| Core Services            |
| SUSE Linux Products GmbH |
----------------------------

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to