Sam Varshavchik wrote, on 10. feb 2007 04:13:
>> Courier in default configuration generates certificates for
>> courier-pop3-ssl
>> and courier-imap-ssl in /usr/share/courier-imap/
>>
>> /etc/courier/pop3d-ssl{,.dist} contains
>> TLS_CERTFILE=/usr/share/courier-imap/pop3d.pem
>>
>> /etc/courier/imapd-ssl{,.dist} contains
>> TLS_CERTFILE=/usr/share/courier-imap/imapd.pem
>>
>> /usr might be mounted read-only according to FHS, and is not expected to
>> contain variable or machine-specific data.
>>
>> Please change the default paths for the certificates to
>> /etc/courier/*.pem.
>> --endquote>
>>
>> This diff fix this issue:
>
> Unfortunately, this would screw up all existing installations, when they
> upgrade. Something like this needs to wait until there's a major new
> version, whenever this might actually be.
>
> Also, you overlooked the mkpop3dcert and mkimapdcert scripts, which must
> be patched as well.
>
> I suggest that, in your rpm, you put symlinks from
> @datadir@/{imap|pop3}.pem to @[EMAIL PROTECTED]
Surely all of the above only applies to Suse? None of it is appropriate
to Red Hat/Fedora rpms, generated from the standard Courier IMAP specs.
Nor do the remarks on respecting possible mounting of /usr ro fit in
with the standard RH/FC habit of putting documentation in
/usr/share/doc, without remounting /usr twice during an rpm
install/update (which doesn't happen). For interest's sake, I'll post to
the rpm ML asking for comments on this.
Quite another thing is, that Courier makes no attempt to conform to
Linux/SysV file hierarchy (see Sam's remark on waiting for a major new
version for such to occur). If Red Hat/Fedora were ever (God forbid) to
support and package Courier products, I'd expect files to be put all
over the place where I wouldn't know their locations and a major
patching operation would have to be carried out at rpm build time to
cope with this. Personally I wouldn't mind if Courier did start adhering
to LFH, even though it would break existing installations - but this is
by no means a request.
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap
