Michael Klatt (OlympusNet) writes: 

> We're running Courier IMAP 1.4.1 and recently purchased a signed 
> certificate from Verisign that will let us do 128-bit encryption with SSL. 
>  What we didn't realize is that the setup for 128-bit encryption is 
> different from 40-bit encryption.  The URL here describes the setup for 
> many applications: 
> 
> http://www.verisign.com/support/install/ 
> 
> See the list under "SECURE / COMMERCE SITE PRO GLOBAL CERTIFICATES". 
> 
> There is a mention of a "Chain" certificate that the server application 
> must have available.  Does Courier support this?  Do we need to get a 
> 40-bit certificate?

Courier-IMAP uses OpenSSL for all SSL-related processing, so your issue is 
more relevant to OpenSSL, than Courier.  OpenSSL's documentation is rather 
skimpy, and it's not really clear what really needs to be done in order to 
supply a chained certificate.  Try simply concatening your certificate with 
the chained CA cert, both in PEM format, and use that as the server 
certificate.  Try concatening them in a different order. 


-- 
Sam 


_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to