Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Monika Janek
Genius! I did the 'any-cert' AS 'ssl' and put the '993' AS port and it worked. I'll do the ssl_ca_file as well. I thought that I had tried the 'yes' as 'ssl' but it works now. Thanks so much for your help Timo. I really appreciate it. :) I love dovecot! Timo Sirainen wrote: Looks like MySQL t

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Timo Sirainen
Looks like MySQL treats ssl as a reserved word. Use 'yes' as 'ssl'. On Thu, 2010-04-29 at 14:51 -0400, Monika Janek wrote: > This was my sql query: > > password_query = SELECT NULL AS password, host, destuser, 'yes' AS > ssl,'Y' AS nopassword, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy FROM >

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Monika Janek
This was my sql query: password_query = SELECT NULL AS password, host, destuser, 'yes' AS ssl,'Y' AS nopassword, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy FROM proxy WHERE user = '%u' It's obviously something I'm doing! But I'll try the ssl_ca_file route too. Timo Sirainen wrote: On Thu,

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Timo Sirainen
On Thu, 2010-04-29 at 14:43 -0400, Monika Janek wrote: > I tried the 'Y' as starttls and I receive this: > > imap-login: proxy: Received invalid SSL certificate > > And the authentication fails. Could it be because I've signed my own certs? Yes. Either put the cert into ssl_ca_file or use 'any

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Monika Janek
Hi Timo! I tried the 'Y' as starttls and I receive this: imap-login: proxy: Received invalid SSL certificate And the authentication fails. Could it be because I've signed my own certs? Whenever I try the 'yes' as ssl in the sql query, I get a syntax error message: Password query failed: You

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Timo Sirainen
On Thu, 2010-04-29 at 13:44 -0400, Monika Janek wrote: > password_query = SELECT NULL AS password, host, destuser, 'Y' AS > nopassword, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy FROM proxy > WHERE user = '%u' > > I take this as to just check the SQL for the existence of the username > then

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Monika Janek
Hi Timo, Thanks for getting back to me! Currently I'm using SQL to check the proxy but the authentication gets passed on to the internal mail server where it authenticates with LDAP. This is my SQL query on the external mail host: password_query = SELECT NULL AS password, host, destuser, 'Y'

Re: [Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Timo Sirainen
On Thu, 2010-04-29 at 11:09 -0400, Monika Janek wrote: > I > read the addition to the documentation about dovecot proxy but I'm not > sure where to add these variables: .. > ssl=yes: Use SSL and require a valid verified remote certificate. Into your passdb's extra fields. What passdb do

[Dovecot] Question about dovecot imap proxy

2010-04-29 Thread Monika Janek
Hi everyone! I have dovecot (1.2.11) on one our external mail servers acting as a proxy. The client (ifor now, my iphone) connects fine via ssl to the external mailserver but I can't seem to get a secure connection now to the internal destination imap server (between external mail server and i