On Wed, 2004-01-14 at 16:05, Joe Rhett wrote: > Use the exact same files for the web server as for the Cyrus mail server. > They're both using the same library.
Well, in Apache I have the following, in addition to the usual 'SSLCertificateFile' and 'SSLCertificateKeyFile' directives: SSLCertificateChainFile /etc/httpd/conf/ssl.crt/ca-bundle-comodo.crt Are you saying that I can can just cat this file with my issued cert and it will work just fine? Hm... I guess I could just test this with a test installation and some /etc/hosts entries. > And no, the CA file is to verify client certs. In this case you put the > certificate and the intermediary certificate in the same file (*.cert) > You don't need a tls_ca_file unless you are verifying client certs. > (unlikely) Yeah, that's what I figured; thanks for the clarification. Wil -- Wil Cooley [EMAIL PROTECTED] Naked Ape Consulting http://nakedape.cc * * * * * * Linux Services for Small Businesses * * * * * * * Naked Ape Consulting http://nakedape.cc * * Naked Ape Business Server http://nakedape.cc/r/smb * * Easy, reliable solutions for small businesses *
signature.asc
Description: This is a digitally signed message part
