Subject: Re: Help getting TLS + IMAP set up
To: NetBSD Help <netbsd-help@netbsd.org>
From: B. James Phillippe spamblock <bryan-spamtrap0@darkforest.org>
List: netbsd-help
Date: 03/15/2002 18:29:13
On the crisp day of Mar 15, B. James Phillippe spamblock remarked:

> Hello,
> 
> I recently upgraded my laptop to pine-4.44 with SSL support.  Now when I
> connect to my NetBSD server running imapd, I would like to be able to use
> the TLS feature.  Can you help me get started?

Hello,

Sorry for following-up on my own post, but I found a solution and wanted to
post back in case anyone wants the quick answer.

Disclaimer: I'm not really using this for security purposes, so I was in
the "bang out the right sequence of commands to get it working" mode, not
the "read and understand all the tangential details" mode. :-)

First run the command:

openssl req -x509 -nodes -newkey rsa:1024 -keyout new.key -out new.crt

to generate a cert/key pair.  I copied the file
/usr/share/examples/openssl/openssl.cnf to /etc/openssl first, but didn't
even update it.

Create the file /etc/openssl/certs/imapd.pem, which is the result of the:

[new.key file]

[new.crt file]

Lastly (optional), symlink ipop3d.pem to imapd.pem.

Connect with an IMAP/SSL-aware client (like pine-4.4) and it should work.

-bp
--
# bryan at darkforest dot org
# Software Engineer