At 4:09 PM -0500 10/27/01, Kim Scarborough wrote:
>When I change my config file
>to this:
>
>set tls-support=alternate-port
>set tls-server-cert-file=/usr/local/etc/certs/cert.pem
>
>It still only opens port 110.

Because you're only binding to port 110.  Setting 'tls-support' to 
'alternate-port' tells Qpopper to insist on an SSL/TLS negotiation as 
soon as the client connection opens.  It does not tell Qpopper to 
listen on a different port.  You tell Qpopper which port to use (in 
standalone mode) on the command line.

>Port 995 is closed.

Because Qpopper wasn't told to use it.

>  Now when I set Eudora to
>force stls, it times out.

Because the STLS command won't work in 'alternate-port' mode. 
'Alternate-port' mode is really an ugly kluge for clients that aren't 
smart enough to use STLS.

>When I set it to force alternate-port, it gets a
>refused connection.

It would work if you also told it use port 110 for alternate-port, or 
if you told Qpopper to listen on port 995.

>When I set it to unencrypted POP3, it times out.

Because Qpopper is in 'alternate-port' mode and is insisting on an 
SSL/TLS negotiation right off the bat.



-- 

Reply via email to