On Oct 8, 2007, at 3:08 AM, Paul J Stevens wrote:


stunnel references were removed from the dbmail init script quite some time ago. The reference still remaining in default/dbmail is defunct and should/will be
removed.

so SSL_TRUE and PEM_FILE are defunct?
Removed them and restarted not sure it made much difference.

So, after finding some more nuggets of information this is where I am to date.

This is what happens when I try to telnet to the imaps port:

2007.10.08 05:56:28 LOG5[5355:47656983060560]: stunnel 4.18 on x86_64- pc-linux-gnu with OpenSSL 0.9.8c 05 Sep 2006 2007.10.08 05:56:28 LOG5[5355:47656983060560]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP 2007.10.08 05:56:28 LOG6[5355:47656983060560]: file ulimit = 1024 (can be changed with 'ulimit -n') 2007.10.08 05:56:28 LOG6[5355:47656983060560]: poll() used - no FD_SETSIZE limit for file descriptors
2007.10.08 05:56:28 LOG5[5355:47656983060560]: 500 clients allowed
2007.10.08 05:56:28 LOG7[5355:47656983060560]: FD 4 in non-blocking mode
2007.10.08 05:56:28 LOG7[5355:47656983060560]: FD 5 in non-blocking mode
2007.10.08 05:56:28 LOG7[5355:47656983060560]: FD 6 in non-blocking mode
2007.10.08 05:56:28 LOG7[5355:47656983060560]: SO_REUSEADDR option set on accept socket 2007.10.08 05:56:28 LOG3[5355:47656983060560]: Error binding imaps to 0.0.0.0:993 2007.10.08 05:56:28 LOG3[5355:47656983060560]: bind: Address already in use (98)

stunnel.conf (or at least the imaps part)
[imaps]
accept  = 993
connect = 143
cert    = /etc/ssl/certs/alpha.just-email.com.pem
key     = /etc/ssl/certs/alpha.just-email.com.pem
session = 14400
TIMEOUTidle = 14400

Where I'm a little confused is I have both an inetd entry:
imaps stream tcp nowait root /usr/bin/stunnel4 stunnel4 /etc/stunnel/ stunnel.conf

and there's an option to run stunnel from init.d -- which fails when I try to run it with an error that the port is already in use: Restarting SSL tunnels: 2007.10.08 06:01:10 LOG7 [5467:47129612009552]: Snagged 64 random bytes from /home/tom/.rnd 2007.10.08 06:01:10 LOG7[5467:47129612009552]: Wrote 1024 new random bytes to /home/tom/.rnd 2007.10.08 06:01:10 LOG7[5467:47129612009552]: RAND_status claims sufficient entropy for the PRNG
2007.10.08 06:01:10 LOG7[5467:47129612009552]: PRNG seeded successfully
2007.10.08 06:01:10 LOG7[5467:47129612009552]: Certificate: /etc/ssl/ certs/alpha.just-email.com.pem
2007.10.08 06:01:10 LOG7[5467:47129612009552]: Certificate loaded
2007.10.08 06:01:10 LOG7[5467:47129612009552]: Key file: /etc/ssl/ certs/alpha.just-email.com.pem
2007.10.08 06:01:10 LOG7[5467:47129612009552]: Private key loaded
2007.10.08 06:01:10 LOG7[5467:47129612009552]: SSL context initialized for service imaps
[Failed: /etc/stunnel/stunnel.conf]
You should check that you have specified the pid= in you configuration file

Which is, for starting stunnel4 from init.d scripts, were I left off.
So, I think dbmail is "working", inetd might be working...
closer...
_______________________________________________
DBmail mailing list
[email protected]
https://mailman.fastxs.nl/mailman/listinfo/dbmail

Reply via email to