Mark:  Thanks for the tip, and for the warning RE: irc-ssl.

Of course I understand the danger in messing with port numbers that are already defined in RFCs. In the case I'm working with, the network this server is on will never be running IRC, and if it is, there are major problems needing to be looked into! For the curious, explanations are below as to the problem I'm trying to solve....


A single UNIX server in this case must serve mail for two networks which are isolated from each other, off a single filesystem.

So one of the things I've been doing is routing traffic from one network to the other for IMAP. This worked beautifully when we were not SSL encrypting things, but when SSL is thrown into the mix, certificate signing becomes an issue.

One imap daemon can only have one signed certificate (to my knowlege). However, due to creative routing and things, the requests to <server1.test.net> are coming FROM <server2.test.net> as well as from server1.

So, I am running two daemons on different ports to deal with the certificate problem: Requests to port 993 must be presented with a signed certificate for server1.test.net, but requests to port 994 must be presented with a signed cert for server2.test.net.



Mark Crispin wrote:

The SSL server port used by the IMAP server is the port identified as "imaps" (/etc/services in most systems, maybe elsewhere if your system uses something like NetInfo or Yellow Pages).

This is set in the third argument in the server_init() call early in the imapd.c source.

In order to have a special version of imapd listening on another port, you must define the new port name in /etc/services (or whereever), and then modify imapd so that the third argument of the server_init() call uses that port name instead of imaps.

Note, by the way, that port 994 is the IRC SSL port (ircs). You can't arbitrarily choose port numbers.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.


_______________________________________________
Imap-uw mailing list
[email protected]
https://mailman1.u.washington.edu/mailman/listinfo/imap-uw

Reply via email to