Subject: Re: latest imap-uw
To: Jared D. McNeill <jmcneill@invisible.ca>
From: Dave Burgess <burgess@neonramp.com>
List: tech-pkg
Date: 05/24/2002 19:14:06
Quoting "Jared D. McNeill" <jmcneill@invisible.ca>:
> Dave Burgess wrote:
>
> > Either way, it looks more like it might be an IMP error rather than an
> IMAP
> > error. So, to answer the original mail "IMAP-UW seems to be working great
> from
> > here!" :-)
>
> Sorry, I guess I wasn't paying too much attention to this thread
> earlier.
>
> I had this same problem. It has to do with self-signed certificates and
> imap-ssl
> with IMP. There are flags that you can add on to the server name to
> disable
> SSL as well as certificate verification (ISTR even if I disable ssl, I
> still
> needed to use novalidate-cert).
>
> It's documented in horde/imp/config/servers.php:
>
> * NOTE: If you are using a self-signed server certificate with with
> either
> * imap/ssl or pop3/ssl, you MUST add /novalidate-cert at the end of the
> * protocol string. So for imap, this would be
> "imap/ssl/novalidate-cert",
> * and for pop3 it would be "pop3/ssl/novalidate-cert". This is
> necessary to
> * tell c-client not to complain about the lack of a valid CA on the
> * certificate.
>
> Of course, since I haven't been paying attention to this thread, I may
> be _way_
> off track. If so, ignore me :^)
>
Sounds like it might be about right. It was complaining about the expired cert
on the server, so I genned up a quick one.
One of these days, I'm going to build us a NetBSD CA.
--
Dave Burgess
Chief Technology Officer
Nebraska On-Ramp, Inc
Bellevue, NE
-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/