Re: Disable client authentication with certificates

2013-12-09 Thread Wolfgang Breyha
On 2013-12-07 10:08, Stefan Gofferje wrote: On 12/03/2013 09:28 PM, Stefan Gofferje wrote: So why does Thunderbird ask me which certificate to use for authentication? Does my Cyrus ask for a client certificate or does it not? ^^ Nobody a clue? It depends. On IMAPS/POP3S ports cyrus never

Re: Disable client authentication with certificates

2013-12-09 Thread Stefan Gofferje
On 12/09/2013 03:09 PM, Wolfgang Breyha wrote: You can either connect to ports 993/995 to prevent the use of client certs That worked fine :). Thanks. Is it planned to integrate your patch into Cyrus? It *is* kinda illogical to ask for a client cert when client cert authentication is explicitly

Re: Disable client authentication with certificates

2013-12-09 Thread Wolfgang Breyha
On 2013-12-09 16:59, Stefan Gofferje wrote: That worked fine :). Thanks. Is it planned to integrate your patch into Cyrus? It *is* kinda illogical to ask for a client cert when client cert authentication is explicitly disabled ^^. My patch is not suitable for general use. IMO client cert

Re: Disable client authentication with certificates

2013-12-09 Thread Wolfgang Breyha
On 2013-12-09 18:10, Wolfgang Breyha wrote: I would simply make it dependent of CA availability. proposed patch for that: https://bugzilla.cyrusimap.org/show_bug.cgi?id=3830 Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center |

bugzilla HTTPS broken

2013-12-09 Thread Wolfgang Breyha
Hi! http://bugzilla.cyrusimap.org/ is redirected to HTTPS. That's good. But then the site is completely broken, since all links still lead to HTTP and firefox rejects to load CSS, JS, ... until explicitly unblocking unencrypted content. Please either allow HTTP again, or fix HTTPS. Greetings,

Re: Disable client authentication with certificates

2013-12-09 Thread Stefan Gofferje
On 12/09/2013 07:10 PM, Wolfgang Breyha wrote: My patch is not suitable for general use. IMO client cert requests should either depend on a new option or on the availability of configured CAs. Both is possible, but I'm not aware of the reason why client certs are requested historically. I