Sharp Tools

I Iz an Op

So I've been running a personal mail server on them there internetz for a few years. I run the Courier-IMAP daemon (with SSL, natch) for mail retrieval. I've always had trouble getting my install of it to handle certs properly - I had made my own CA in order to generate a signed CA and import the root CA into my client. But that never seemed to work, so I just became resigned to clicking the 'Accept' button on various email clients.

I finally got annoyed enough tonight to actually go buy a cert. I installed it. Postfix happily accepted it for SMTP-TLS. But Courier...when I ran my email client, it kept bitching about self-signed certs.

WTF?

After literally 45 minutes of poking around, I discovered that I had (lo those years ago) installed a Courier-IMAP package from source. Yep, remembered that.

Then I'd been editing the conf files for the damn distro version of Courier full, in /etc/courier. Um.

So...

Yeah.

I looked at the source init scripts and decided it wasn't worth my time to re-fucknicate all the conf files, so I eventually just found out where the installed init scripts were expecting to find the cert files and linked those to my new cert.

Works.

Sigh.

Hey...I wonder if that's why Entourage can't see new mail...the damn TRAVERSE_FULL setting is..HEY!

Posted by jbz at February 7, 2009 3:34 AM | TrackBack