Package: cyrus22-impad
Version: 2.2.12-1
Severity: minor

In impad.conf the suggested locations for the ssl cert and key is:
/etc/ssl/certs/cyrus-global.pem
/etc/ssl/private/cyrus-global.key

and yet /etc/ssl/private is owned by root and chmod 600 by default which
makes it unuseable when cyrus runs as user cyrus.
Would these be better in /etc/cyrus22/ssl/ ?

Also it may be worth adding the following command:
openssl req -new -nodes -x509 -out /etc/cyrus22/ssl/cyrus-global.cert -keyout
/etc/cyrus22/ssl/cyrus-global.key -newkey rsa:2048

to the docs to help people produce a self-signed certificate

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.4-ash-050317-01
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to