Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Timo Sirainen
On 17.7.2012, at 1.35, Robert Blayzor wrote: So is there any way possible to turn off advertising of TLS on port or turn it off/on per IP? Something like: If those work, then yes. If they don't, then no. I'd think they would work. ssl = yes ssl_cert = /etc/ssl/cert/default.pem ssl_key

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Robert Blayzor
On Jul 17, 2012, at 6:59 AM, Timo Sirainen wrote: On 17.7.2012, at 1.35, Robert Blayzor wrote: So is there any way possible to turn off advertising of TLS on port or turn it off/on per IP? Something like: If those work, then yes. If they don't, then no. I'd think they would work. No,

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Timo Sirainen
On 17.7.2012, at 15.20, Robert Blayzor wrote: On Jul 17, 2012, at 6:59 AM, Timo Sirainen wrote: On 17.7.2012, at 1.35, Robert Blayzor wrote: So is there any way possible to turn off advertising of TLS on port or turn it off/on per IP? Something like: If those work, then yes. If they

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Robert Blayzor
On Jul 17, 2012, at 8:28 AM, Timo Sirainen wrote: No, they do not. It would be nice if it did. Or at least some way to disable TLS offering/advertisement if disabling the SSL socket is not possible. Here: http://hg.dovecot.org/dovecot-2.1/rev/258c2e231357 Works perfectly, thanks! --

[Dovecot] Selective TLS per local IP

2012-07-16 Thread Robert Blayzor
We have the requirement to provide SSL on some IP addresses, but not others on our servers. Providing SSL is the easy part and we're able to use multiple SSL certificates now. (thanks Timo!) All is working ok, but we several IP hosts that do not require SSL and do not have valid