Folks,

Using cyrus-2.0.11 and openssl-0.9.5a on RedHat-7.0, I took a stab at securing 
imap traffic with SSL.

I followed the recommendations forgenerating a self-signed cert in the docs, 
namely:

openssl req -new -x509 -nodes -out /var/imap/server.pem -keyout 
/var/imap/server.pem -days 365

and I _DO_ manage to negotiate a secure connection once I convince Euwhora to 
trust my homegrown cert, but I have one remaining issue with the setup:

Feb 16 19:14:50 mail2 imapd[15899]: TLS engine: cannot load CA data
Feb 16 19:14:50 mail2 imapd[15899]: starttls: TLSv1 with cipher DES-CBC3-SHA 
(168/168 bits) no authentication

Is the "cannot load CA data" important? Have I missed a step in the SSL setup?

Thanks!

-Darren


Reply via email to