mess822 TLS patch

Malte Tancred · *nix forums beginner Joined: 17 Jan 2005 Posts: 11

Hi!

I've combined John Levine's ofmipd AUTH patch [1] with stuff from
Scott Gifford's UCSPI-TLS [2]. With these changes, ofmipd now supports
the use of TLS by means of the sslserver program from UCSPI-TLS.

My patch to the mess822 source tree can be found here:

http://tancred.com/malte/code/mess822-0.58-auth-ucspitls.txt

(see [3] for the diffs between an auth-patched source and a ucspitls-
patched source).

One can require that a client use TLS by setting the environment
variable FORCETLS; if set, ofmipd will reply with a 530 code asking
for a STARTTLS and will not advertise AUTH capabilities until the TLS
session is started.

Note that the only clients I've tested are Mac OS X Mail and Thunder-
bird (Mac version).

Comments are more than welcome.

Regards,
Malte

[1] http://qmail.gurus.com/mess822-smtp-auth-patch.txt
[2] http://www.suspectclass.com/~sgifford/ucspi-tls/
[3] http://tancred.com/malte/code/mess822-0.58-auth-to-ucspitls.txt

Malte Tancred · *nix forums beginner Joined: 17 Jan 2005 Posts: 11

On Jun 19, 2006, at 20.33, Erwin Hoffmann wrote:

Google