dylan wrote:
thanks for the initial ideas:

regarding APOP: i am currently running an email server on a mac here at
home, with the APOP option enabled- when i check my mail on that server with
OE 5.06, i MUST use the option "Always Use Secure Password". Is this not
APOP? If not, then what would one call it? Basically i need a secure auth
system, and with my current setup only plain text passwords are being
accepted by Courier.

SPA is an MS protocol, it is not SSL. You probably don't want it.

SSL is another matter- the 'courier-pop3-ssl' daemon is running on the same
server, and i have verified that it is working by issuing the commands:

$ openssl s_client -host hostname.domain -port 993

$ openssl s_client -host hostname.domain -port 995

both of which allow me to login to the mail server. there are some errors
reported but it still works. here is the output:

--------------snip-------------------
dylan@fungus:~$ openssl s_client -host iici.no-ip.com -port 995
CONNECTED(00000003)
depth=0 /C=US/ST=CA/L=Sacramento/O=Courier Mail
Server/OU=Automatically-generated POP3 SSL
[EMAIL PROTECTED]
[...]

You are connecting to iici.no-ip.com but the cert's CN is "localhost" - OE probably sees this as an error in the certificate.

Additionally, when I setup self-signed, I setup my own CA certificate, and imported it into IE first, then any self-signed cert's I make don't give me the error that it's not signed by an authority. Otherwise in MS Outlook it would prompt me each time saying "are you sure you want to connect?" which got annoying.

-jesse



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to