Re: I really need to implement secure pop & secure imap !

[nissim]

Lutz Jaenicke wrote:

On Thu, Aug 24, 2000 at 08:21:51PM +0300, nissim wrote:
> I also ren the CA.pl -newca to create the certification as it was said
> on the man of CA.pl but how the hell am i going to put it
> all together with imap & pop to secure them over ssl .
>
> I subscribed this mailing list because i saw a response of
> [EMAIL PROTECTED] about the spop & simap using the ...cyrus imapd
> and i really need to know if this deamon does the job and how ???
>
> I will be very happy to get a guidance from any of you who already
> implemented secure imapd & popd  ASAP .

I didn't try Cyrus, but the latest beta of UW-imap (imap-2000) support TLS.
Setting it up is quite simple:
- Put the services "imaps" and "pop3s" into /etc/services.
   imaps      993/tcp        # IMAP over SSL
   pop3s      995/tcp        # POP-3 over SSL
- Set up inetd to start the imapd or ipop3d when connecting to these services:
   pop3s stream tcp nowait root /usr/local/lbin/ipop3d ipop3d
   imaps stream tcp nowait root /usr/local/lbin/imapd imapd
- Put your server certificate and key into the default location:
   /usr/local/ssl/certs/imapd.pem
   /usr/local/ssl/certs/ipop3d.pem
- Compile UW imap-2000.RELEASE-CANDIDATE* with SSL support by following
  the instructions in docs/SSLBUILD

It's easy, isn't it?

Regards,
        Lutz
PS. Most people don't like to be asked for a voluntarily offered advice "ASAP".
--
Lutz Jaenicke                             [EMAIL PROTECTED]
BTU Cottbus              http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project                                http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Hello ,

First I want  to thank you for answering so fast !!!
I need some more information about to full procedure including making the keys and building the whole package .
I need to mention that currently i have built the openssl package and now i need to configure it all with the regular imapd and ipop3d .

Another question that have is i saw that you put 2 entries in t he inetd.conf but i didnt see any thing about the ssl module
in these two entries ???

could you bee more specific please , it wil be very helpfull ...

P.S :
---
A full howto will help very much .

-- 
Regards ,

Nissim Penias .
System Administrator .
Aduva Inc .

Cellular Phone: 972-58-348280 .