[KLUG Members] secure mail

Adam Williams members@kalamazoolinux.org
03 Mar 2003 07:18:55 -0500


>>>I already tried to setup a server with cyrus-imap. Created even some
>>>keys but found out (to late) that Mozilla does not support the key
>>>types used.
>>I usually beat my head open over authentication, but I had little
>>trouble creating an SSL cert that mozilla cheerfully accepted. Could you
>>be more detailed as to this problem?
>I was sure I kept my notes somewhere, but can't find them...
>I can't remember the exact fault codes. I am quite sure I created the 
>certs correctly. Created them several times, with the same result.
>I searched for the erors on the cyrus website but that didn't gave any 
>solution.
>I have planned a new try in the near future. But was hoping to plan this 
>better...
>This just pops up: can I just install openssl and use it with any 
>version of sendmail or do I need cyrus-sendmail ? What is the 
>advantage/disadvantage of cyrus. Why choose for one or another. Just 
>because you don't need to create a unix user?

There is not cyrus-sendmail.  The default sendmail in Redhat supports
SASL and SSL.  Cyrus-SASL is an authentication/authorization API/model. 
You can tell is something supports Cyrus SASL using "ldd {program}" and
see if it is linked to libsasl.  RedHat 7.x uses SASL 1.x and 8.x uses
SASL 2.x.  Sendmail works with either SASL version,  Cyrus IMAPd 2.x
requires SASL 2.x.  Cyrus IMAPd uses SASL 1.x.