On 15 Nov 2001, Brent Newson wrote:

> Can anyone point me in the direction of some good documentation or info
> about running imap over ssl please?
> -- 
> Cheers
> 
> Brent

The current version of UW-imap can be built with OpenSSL.  The only
problem I had was trying to generate a certificate in the form it wanted.
The information for that can be found in the latest pre-release version
imap-2001a.RELEASE-CANDIDATE.4 (and thanks to Breeze Howard for the tip). 
Excerpt follows.

>From the imap-2001a.RELEASE-CANDIDATE.4/docs/SSLBUILD file.

>                        Last Updated: 3 October 2001

> 
>      The imapd.pem and ipop3d.pem must contain a private key and a
> certificate.  The private key must not be encrypted.
> 
>      The following command to openssl can be used to create a self-signed
> certificate with a 10-year expiration:
>       req -new -x509 -nodes -out imapd.pem -keyout imapd.pem -days 3650
> 
>                       *** IMPORTANT ***
>      We DO NOT recommend, encourage, or sanction the use of self-signed
> certificates.  Nor will we be responsible for any problems (including security
> problems!) which result from your use of a self-signed certificate.  Use of
> self-signed certificates should be limited to testing only.  Buy a real
> certificate from a certificate authority!
>                       *** IMPORTANT ***


=== JJ =============================================================

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to