At 11:27 AM 9/9/02 -0700, Chuck Yerkes wrote:
>Quoting SkyDeep ([EMAIL PROTECTED]):
> > I have this same problem with the latest version of Open SSL.  Has ANYONE
> > gotten SSL to function with Qpopper or is this feature simply listed but
> > not working?
>
>- Client in use

Latest version of Eudora 5.1.1 (paid mode)

>- version of qpopper

4.0.5b1

OS:

FreeBSD 4.5-RELEASE (P4 1.5ghz 1MB ram intel motherboard)

>- "latest version" of OpenSSL

0.9.6g

>- how you built it

OpenSSL

./config no-threads -PIC
make
make test
make install

qpopper:

./configure --enable-shy --with-openssl=/usr/local/ssl

>- what you used to generate the certificates

OpenSSL - followed instructions (minus the typos) on Qualcom's web site to 
create and sign my own certificate.

i.e. (abbreviated - not exact - mainly noted for the parms not filespecs)
openssl req -new -nodes -out req.pem -keyout cert.pem

generating private key, signing it, etc:

openssl genrsa -des3 -out ca.key 1024
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
openssl x509 -req -CA ca.crt -CAkey ca.key -days 365 -in req.pem -out 
signed-req.pem -CAcreateserial
cat signed-req.pem >> cert.pem

>- what is in your config

inetd.conf:

pop3    stream  tcp     nowait/20/5     root 
/usr/local/libexec/qpopper-ssl  qpopper-ssl -s -R -f 
/etc/mail/certs/qpopper.config

yes, qpopper-ssl is set up in /etc/hosts.allow

qpopper.config:

set tls-support = stls
set tls-server-cert-file = /etc/mail/certs/cert.pem


>Tools to aid:
>  ssldump (found in /usr/ports/ of the BSDs and via google).
>  debug flags on qpopper

don't know about this.... I really don't want to get into the innards of 
this system - I just need it working and have never had any trouble except 
trying to use qpopper with SSL.

I still can't get anyone to even acknowledge this works... that qpopper 
actualy does support SSL with any of the recent OpenSSL libraries...


Reply via email to