widyachacra wrote:
> Dear List Friends,
> 
> I'm using netqmail for three(3) domains(virtual mail). I want to
> create separate CA certifications for each three(3) virtual mail
> domains. How can i do this?
Not sure what exactly you are trying to achieve, please clarify.

Let me guess:

Q: You want to use SMTP/SSL and probably POP3/SSL and you want the
server to respond with different server certificate (nothing to do with
CA) for each vdomain?

A: You can NOT do this if you are running on a single IP. If you run
several instances of tcpserver (or sslserver from sys-apps/ucspi-ssl) it
probably can be easily done if you setup three instances on three
different IPs.  But might not work, has to think it. You might need to
have a fourth "master" tcpserver.
In ASCII it might look like:

client_1======>sslserver_1---tcpclient_1---
                                           \
.......                                     |--->tcpserver_0-->qmail-smtpd --- 
vpopmail
                                           /
client_N======>sslserver_N---tcpclient_2---

Everything can be implemented on one machine with several IP addresses
(or ports, but it is messy). Similar stuff for the POP3/SSL.
Basically this is a dirtbag SSL accelerator ;-D

DISCLAIMER: This is off-the-top-of-my-head, it might not work ;-)

Kalin.

-- 
|[ ~~~~~~~~~~~~~~~~~~~~~~ ]|
+-> http://ThinRope.net/ <-+
|[ ______________________ ]|

-- 
[EMAIL PROTECTED] mailing list

Reply via email to