Hello,

thanks for your answer .

I created certificate and key like that :


# openssl req -x509 -newkey rsa:4096 -keyout imapkey.pem -out imapcert.pem -days 365 -nodes

The "my-rootCA.crt" in your example is my imapcert.pem in my command ?


Le 16/12/2021 à 17:41, Christian Mack (christian.m...@uni-konstanz.de) a écrit :
Hello

Your self signed certificate is a CA certificate :-)

On FreeBSD you have to:
sudo cp my-rootCA.crt /etc/ssl/certs/
sudo chmod 0644 /etc/ssl/certs/my-rootCA.crt
sudo chown root:wheel /etc/ssl/certs/my-rootCA.crt
sudo openssl x509 -noout -hash -in /etc/ssl/certs/my-rootCA.crt

The last command gives you some String, e.g. 5d3b9418
Use that in the following command:
sudo ln -s /etc/ssl/certs/my-rootCA.crt /etc/ssl/certs/5d3b9418.0

That's it.

Of course you have to do that for both self signed certificates from
your two servers.


Kind regards,
Christian Mack

On 16.12.21 17:01, HYVERNAT Philippe (p.hyver...@outlook.fr) wrote:
Thanks for your answer,

i use FreeBSD 13 OS , so where can i place and make a ca certificate ?

my smtp  and imap server are on a different hosts each one

smtp : 172.30.20.121

imap : 172.30.20.131


Le 16/12/2021 à 13:24, Christian Mack (christian.m...@uni-konstanz.de) a
écrit :
Hello

This is your problem.
You have to tell your OS, which CA you use.

Which OS are you using?

In Debian you have to add it by:
sudo cp my-rootCA.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates


Kind regards,
Christian Mack

On 16.12.21 09:38, HYVERNAT Philippe (p.hyver...@outlook.fr) wrote:
Hello,

no i haven't and i use the name of the host present in the certifiate
(using also openssl s_client..... command to connect and show the host)

It is a self signed certificate, is it a problem ? ssl error :
unknown ca

Thanks


Le 16/12/2021 à 08:59, Christian Mack (christian.m...@uni-konstanz.de) a
écrit :
Hello

Do you have those IP addresses in your certificates on your IMAP and
SMTP servers?

If not, you should add the names from those certificates in your
sogo.conf.


Kind regards,
Christian Mack

On 14.12.21 15:13, hyvernat philippe (p.hyver...@outlook.fr) wrote:
Hello,
Si nothing butter. I use the / separator used also in dovecot

And with the imap acl parameter nothing better.
The connection is ok with imap://host:143 but nothing whith imaps and
993


HYVERNAT Philippe

Le 13 déc. 2021 à 18:18, Christian Mack<users@sogo.nu>  a écrit :

Hello

Have you set the following option?
      SOGoIMAPAclConformsToIMAPExt = YES;

And what have you set for NGImap4ConnectionStringSeparator?


Kind regards,
Christian Mack

Am 13.12.21 um 16:51 schrieb HYVERNAT Philippe
(p.hyver...@outlook.fr):
Hello all,

another problem, i have an smtp and imap server :


postfix :

587 STARTTLS PLAIN

Imap :

993 SSL/TLS PLAIN


On thunderbird everything is ok but impossible to connect with
Sogo. I
tried many configuration and nothing is ok  :


SOGoIMAPServer = "imaps//172.30.20.131:993";

     SOGoSMTPServer ="smtp://172.30.20.121:587/?tls=YES";

SOGoSMTPAuthenticationType = PLAIN;
     SOGoMailingMechanism = smtp;

Have you any configuration example ?


thanks

HYVERNAT Philippe,



--
Christian Mack
Universität Konstanz
Kommunikations-, Informations-, Medienzentrum (KIM)
Abteilung IT-Dienste Forschung und Lehre
78457 Konstanz
+49 7531 88-4416


--
users@sogo.nu
https://inverse.ca/sogo/lists

Reply via email to