Hi, Sam

1. Check version of cornerstone package James uses. It must be latest one (I
advise you to build cornerstone.jar from apache cvs sources). Before you
build cornerstone make sure you have jsse packages in place and it is
detected by cornerstone build.
2. Generate your test keystore using your java keytool (refer sun's manual
for this)
3. uncomment <useTLS>true</useTLS> in smtpserver
4. uncomment <factory name=... blah blah blah in sockets block of
james-config
5. Now make sure that:
   a. james build includes this keystore into sar
   b. james-config.xml contains correct information about this keystore
   c. james build "builds" jsse jars into james.sar
6. build james and enjoy ;-) ssl (there are tricks to make, let's say OE
work with secured james, but this is a M$ know how :-), just kidding)

Need more info, don't hesitate ask!

Note to James developers: I can update security section for latest James,
what is the submission format for this?

Andrei


----- Original Message -----
From: "Samuel Sadek" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, June 08, 2002 12:37 PM
Subject: Using TLS & SSL


> I have looked at James website and have witnessed a section on setting up
> James to use an ecryption tunnel between server and requesting clients via
> usage of TLS and SSL protocols. The section there is outdated and refers
to
> explicitely version 1.2.1 of James. I'm having problems getting it
> configured on the latest version of James i.e. 2.1a1. Can anyone lend me a
> helping hand? Or better still update the section I mentioned so that many
> poor souls can start this attempt.
>
> Thanks in advance,
>
> Sam.
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.
>
>
> --
> To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>
>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to