Hi Peter,
YC>> In Mozilla I checked the box "Use secure connection(SSL)" :-) YC>> In Netscape 6.2 I checked the same options in Server Settings section PP> OK. So Mozilla and Nutscrape use SSL. That's an option for the PP> _connection_, not for authentication. PP> While The Bat! 1.53 seems to be set up using 'MD5-APOP' which is an option PP> for authentication and not connection. PP> So two issues are mixed up here ... :-/ You are right for this subject. I mixed it YC>> I installed the qmail-vpopmail with "POP3 Server with APOP and SSL support" PP> That's fine. The problem is: PP> There is no 'qmail-vpopmail'. This are two different, co-working, PP> softwares. PP> The next thing is: neither qmail nor vpopmail does support SSL 'from PP> scratch' so this must be either an 'stunnel'-based installation or a PP> patches qmail version -> what patch (incl. qmail-version and patch-version) PP> did you (the vendor) apply? PP> The next is: vpopmail is capable of APOP, AFAIK. But what vpopmail-version PP> are you using? 5.2? 5.3.x (devel branch)? PP> If you're using and older vpopmail than 5.2: is this user created as 'APOP' PP> user? When using >>=5.2: is 'clear-passwd' enabled? IIRC APOP relies on that. PP> I'd suggest the first step you take is installing The Bat! 1.54, available PP> from PP> http://www.ritlabs.com/the_bat/ PP> and enable SSL with normal POP3-authentication in The Bat!. This should be PP> the same Mozilla & Nutscrape are currently set up at your side. PP> This way your password will be SSL-encrypted when transferred to the server PP> and therefore be secure even if it's not extra encrypted by any PP> MD5-algorithm. This is the story: :-) I installed a mail server based http://shupp.org/toaster/ A small text from the document ******************************* Qmail SMTP Mail Server with SMTP-AUTH (Plain, CRAM-MD5), TLS (SSL) support, and optional Virus Scanner. POP3 Server with APOP and SSL support IMAP Server with TLS (SSL) support WebMail Server Quota Support (usage viewable by webmail) Autoresponder Mailing Lists Web-Based Email Administration ******************************* I installed the all the necessary software (also stunnel and openssl) I only want that, usernames and password dont captured during the reading mail. Here is the problem: Most of my users use Netscape mail client and they have no problem with POP3 with SSL. But I like TB :-) and want the same security with the others :-) I changed the connection type to "Secure the dedicated port (TLS)" (port chaged 995 automaticly) that you sad me But it did not work :-( Here is my log: ******************** @400000003cf63ec7329a8d3c 2002.05.30 18:01:17 LOG5[3396:1024]: Using 'qmail-popup' as tcpwrapper service name @400000003cf63ec732f4ea0c 2002.05.30 18:01:17 LOG5[3396:1024]: stunnel 3.22 on i586-mandrake-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.6b 9 Jul 2001 @400000003cf63ec732fb5694 2002.05.30 18:01:17 LOG5[3396:1024]: qmail-popup connected from 10.10.10.5:3995 @400000003cf63ec7334ae9ac 2002.05.30 18:01:17 LOG3[3396:1024]: SSL_accept: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca @400000003cf63ec73359baa4 tcpserver: end 3396 status 0 @400000003cf63ec7335a994c tcpserver: status: 0/40 ******************** I have not got a real certificate, is it problem for TB Yalcin ________________________________________________________ Current Ver: 1.60m FAQ : http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://bt.ritlabs.com
