Hi Eric! To answer your questions:
1) A Zenmap scan shows: 443/tcp open ssl/http Apache httpd 2.2.17 ((Unix) mod_ssl/2.2.17 OpenSSL/0.9.8r DAV/2 PHP/5.3.6) |_sslv2: server still supports SSLv2 |_http-title: 403 Forbidden |_http-methods: No Allow or Public header in OPTIONS response (status code 403) 465/tcp open ssl/smtp 993/tcp open ssl/imap |_imap-capabilities: CONDSTORE QRESYNC NAMESPACE ESEARCH IMAP4rev1 AUTH=PLAIN SEARCHRES I18NLEVEL=1 UIDPLUS WITHIN ENABLE UNSELECT LITERAL+ IDLE SASL-IR CHILDREN 995/tcp open ssl/pop3 |_pop3-capabilities: USER STLS PIPELINING APOP OK(K Capability list follows) So my ports concerned are open. 2)Process #ps -ef ... root 15403 1 0 14:44 ? 00:00:02 /opt/james3/bin/./wrapper /opt/james3/bin/../conf/wrapper.conf wrapper.syslog.ident=ja root 15405 15403 3 14:44 ? 00:02:31 java -XX:+HeapDumpOnOutOfMemoryError -Dcom.sun.management.jmxremote=true -Dcom.sun.man root 17096 9630 0 16:03 pts/1 00:00:00 ps -ef root@darkstar:/opt/james3/bin# So a James process is alive. 3) However: bash-4.1# /usr/bin/openssl s_client -quiet -connect localhost:995 connect: Connection refused connect:errno=111 bash-4.1# ^C bash-4.1# telnet localhost 995 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused bash-4.1# So James ssl is not connecting to the open ports concerned. Therefore it is the James' installation that is faulty. I would like to know particularly how should: jasypt-1.9.0-dist.zip be installed. Best regards -- Jean L. Guislain [email protected] On Thu, Aug 16, 2012, at 03:46, Eric Charles wrote: > Did you correctly defined the port and tls tag in > smtp/imap/pop3server.conf and check james is running. > > You can see if a socket is listening with telnet localhost 995. > ps -ef to verify james process is up. > Any exception in the log? > > Thx, Eric > > > On 08/15/2012 07:37 PM, Jean L. Guislain wrote: > > Well, > > What I want is to be able to poll (with POP3 encrypted) an external > > server (in my case fastmail's server mail.messagingengine.com) and to > > poll James with Thunderbird (with an IMAP encrypted connection). > > So I gess, I need ssl enabled in pop3, imap AND fetchmail, right? > > I followd the steps http://james.apache.org/server/3/config-ssl-tls.html > > I removed sunjce_provider.jar from /opt/james3/bin. I am using James 3 > > and JDK 1.7 > > I still get: > > bash-4.1# /usr/bin/openssl s_client -quiet -connect localhost:995 > > connect: Connection refused > > connect:errno=111 > > bash-4.1# > > Rgs, > > > > -- > > Jean L. Guislain > > [email protected] > > > > On Tue, Aug 14, 2012, at 13:52, Eric Charles wrote: > >> I was not sure if you wanted ssl on pop3/smtp/imap4 or on fetchmail. > >> > >> Did you follow http://james.apache.org/server/3/config-ssl-tls.html? > >> the sunjec_provider... jars are for james 2.3 and jdk < 1.5. > >> > >> Thx, Eric > >> > >> On 08/14/2012 07:06 PM, Jean L. Guislain wrote: > >>> > >>> Thank you Eric for your answer. > >>> So far I have the james-server.log message "connection refused". > >>> When I try: > >>> /usr/bin/openssl s_client -quiet -connect localhost:995 > >>> I get: > >>> bash-4.1# /usr/bin/openssl s_client -quiet -connect localhost:995 > >>> connect: Connection refused > >>> connect:errno=111 > >>> bash-4.1# > >>> So I am not yet at the stage of configuring fetchmail. > >>> But to try to get my ssl configuration working... > >>> I installed: > >>> bcmail-jdk15on-147.jar > >>> bcprov-jdk15on-147.jar > >>> in /opt/james3/conf/lib > >>> I copied: > >>> sunjce_provider.jar > >>> to /opt/james3/lib > >>> I copied: > >>> crypto-147 (jasypt-1.9.0-dist.zip) > >>> to /opt/james/conf/lib > >>> How come I get the ssl connection refused on ports 995, 993 and 465? > >>> Rgs, > >>> > >>> -- > >>> Jean L. Guislain > >>> [email protected] > >>> > >>> On Tue, Aug 14, 2012, at 03:47, Eric Charles wrote: > >>>> Hi, > >>>> > >>>> Did you inspire from the configuration for GMail > >>>> http://james.apache.org/server/3/config-fetchmail.html#Fetchmail_Gmail > >>>> > >>>> It shows the mail.* properties you have to set. > >>>> > >>>> Btw, If you want to fetch a gmail account, I remember you have to enable > >>>> "something" on the google site. > >>>> > >>>> ... and bring here any exception, log message you can. > >>>> > >>>> Thx, Eric > >>>> > >>>> > >>>> On 08/14/2012 02:18 AM, Jean L. Guislain wrote: > >>>>> Hi! > >>>>> I have tried almost everything possible to have have ssl working with > >>>>> apache-james-3.0-beta4. > >>>>> It does not work. > >>>>> What should I do to have it working? (I need this to poll an external > >>>>> server with fetchmail/pop3). > >>>>> Please help > >>>>> Rgs > >>>>> > >>>>> jl > >>>>> -- > >>>>> Jean L. Guislain > >>>>> [email protected] > >>>>> > >>>>> > >>>>> --------------------------------------------------------------------- > >>>>> To unsubscribe, e-mail: [email protected] > >>>>> For additional commands, e-mail: [email protected] > >>>>> > >>>> > >>>> > >>>> -- > >>>> eric | http://about.echarles.net | @echarles > >>>> > >>>> > >>>> --------------------------------------------------------------------- > >>>> To unsubscribe, e-mail: [email protected] > >>>> For additional commands, e-mail: [email protected] > >>>> > >>> > >>> --------------------------------------------------------------------- > >>> To unsubscribe, e-mail: [email protected] > >>> For additional commands, e-mail: [email protected] > >>> > >> > >> > >> -- > >> eric | http://about.echarles.net | @echarles > >> > >> > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: [email protected] > >> For additional commands, e-mail: [email protected] > >> > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > -- > eric | http://about.echarles.net | @echarles > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
