thanks for the initial ideas:

regarding APOP: i am currently running an email server on a mac here at
home, with the APOP option enabled- when i check my mail on that server with
OE 5.06, i MUST use the option "Always Use Secure Password". Is this not
APOP? If not, then what would one call it? Basically i need a secure auth
system, and with my current setup only plain text passwords are being
accepted by Courier.

SSL is another matter- the 'courier-pop3-ssl' daemon is running on the same
server, and i have verified that it is working by issuing the commands:

$ openssl s_client -host hostname.domain -port 993

$ openssl s_client -host hostname.domain -port 995

both of which allow me to login to the mail server. there are some errors
reported but it still works. here is the output:

--------------snip-------------------
dylan@fungus:~$ openssl s_client -host iici.no-ip.com -port 995
CONNECTED(00000003)
depth=0 /C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
verify return:1
---
Certificate chain
 0 s:/C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
   i:/C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
issuer=/C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
---
No client certificate CA names sent
---
SSL handshake has read 927 bytes and written 314 bytes
---
New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : DES-CBC3-SHA
    Session-ID: 
DB612D679120BBA689230449C5FF71F19D5CE78DF1B73B568625B6F4CCFB54B9
    Session-ID-ctx:
    Master-Key: 
66FF84FCBD4B173CB041A14BD176E843B862B2A7CE7B5F8B0AFC7BD45EC120BE441F3C5ACC86
CE39F35C0B5E380A6CAF
    Key-Arg   : None
    Start Time: 1044127469
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)
---
+OK Hello there.
----------------------------------------

thanks!


------replying to:

on 03.2.1 8:20 AM, Chris Berry at [EMAIL PROTECTED] wrote:

> Secure Sockets Layer uses certificates to prove authenticity, have you
> checked yours, that's what it seems to be complaining about.


on 03.2.1 6:34 AM, Vladimir Kabanov at [EMAIL PROTECTED] wrote:

> outlook express can not use APOP auth method.
> 
> ----- Original Message -----
> From: "dylan" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Saturday, February 01, 2003 7:39 PM
> Subject: [courier-users] SSL or APOP from Outlook Express 5.06(Mac)
> 
> 
>> hi,
>> 
>> i have verified that my courier pop and pop-ssl servers are working on my
>> server, however i am not able to connect remotely from outlook express
> 5.06
>> (mac) using either APOP or SSL. plain text passwords work fine, but this
> is
>> not ideal.
>> 
>> here are the errors that i am getting:
>> with APOP:
>> The POP server returned an unexpected reply to a command that Outlook
>> Express issued.
>> 
>> with SSL:
>> There is a problem with the security certificate, please use internet
>> explorer to correct this problem.
>> 
>> 
>> any pointers/ ideas?
>> 
>> 
>> thanks in advance
>> 
>> dylan
>> 
>> 
>> 
>> -------------------------------------------------------
>> This SF.NET email is sponsored by:
>> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
>> http://www.vasoftware.com
>> _______________________________________________
>> courier-users mailing list
>> [EMAIL PROTECTED]
>> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
>> 
> 



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to