howto configure Squirrelmail with SSL ?

['chris']

hi

on debian sarge stable, I have setup

postfix with TLS/SASL
courier-IMAP/courier-POP3
squirrelmail

if I do a test now, I'm getting the following error:


Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number in /usr/share/squirrelmail/src/configtest.php on line 205

Warning: fsockopen(): php_stream_sock_ssl_activate_with_method: SSL handshake/connection failed in /usr/share/squirrelmail/src/configtest.php on line 205

Warning: fsockopen(): failed to activate SSL mode 2 in /usr/share/squirrelmail/src/configtest.php on line 205

ERROR: Error connecting to SMTP server "localhost:25".Server error: (115) Operation now in progress



howto configure Squirrelmail with SSL ?

[Steven E. Protter]

Shalom,

There is nothing that needs to be done with squirrelmail to make it work with ssl.

If you have a proper ssl certificate configured with the httpd and the mta(postfix for you) squirrelmail will work nicely. If you have a proper ssl certificate integrated into the web environment, you can install the https plugin and keep the entire squirrelmail transaction encrypted, which is a very good idea.

You need to isntall an ssl certificate for your postfix mta, to make things work properly and get your error message to go away.

Threads:
http://www.serpentine.com/blog/software/postfix-auth-tls.html
http://workaround.org/articles/ispmail-sarge/
http://genco.gen.tc/en_postfix_sasl_courier_mysql_virtual_maildrop_squirrelmail_quota.php

There are more, you'll just need to decide which one works for you.

SEP

['chris']

sorry, but these links don't work.

[Bill Thorsteinson]

As you are running Squirrelmail on the same
server as postfix turn off SSL.

When I do set up SSL i use tinyca to create
a certificate authority. The CA and public
key files go in /etc/ssl/certs and are
world readable. The private key goes in
/etc/ssl/private and has no group or world
access.
Setup the programs to use your host's
certificate and key. You also need to enable
the certificate authority record either by
setting the CA authority file parameter for
the program or generating a hash for the
CA Authority direcotory (/etc/ssl/certs).

I would configure Squirrelmail to use
the CA file option if SSL were enabled.

['chris']

yep,
squirrelmail is running on the same server as postfix.

I changed in /etc/squirrelmail/config.php:

$use_imap_tls = false;
$use_smtp_tls = false;
$default_folder_prefix = 'INBOX.';

and now it seems to work !

greetings
chris