Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Robert Blayzor
On Jul 17, 2012, at 8:28 AM, Timo Sirainen wrote: >> No, they do not. It would be nice if it did. Or at least some way to >> disable TLS offering/advertisement if disabling the SSL socket is not >> possible. > > Here: http://hg.dovecot.org/dovecot-2.1/rev/258c2e231357 Works perfectly, thank

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Timo Sirainen
On 17.7.2012, at 15.20, Robert Blayzor wrote: > On Jul 17, 2012, at 6:59 AM, Timo Sirainen wrote: >> On 17.7.2012, at 1.35, Robert Blayzor wrote: >> >>> So is there any way possible to turn off advertising of TLS on port or turn >>> it off/on per IP? >>> >>> Something like: >> >> If those work

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Robert Blayzor
On Jul 17, 2012, at 6:59 AM, Timo Sirainen wrote: > On 17.7.2012, at 1.35, Robert Blayzor wrote: > >> So is there any way possible to turn off advertising of TLS on port or turn >> it off/on per IP? >> >> Something like: > > If those work, then yes. If they don't, then no. I'd think they would

Re: [Dovecot] Selective TLS per local IP

2012-07-17 Thread Timo Sirainen
On 17.7.2012, at 1.35, Robert Blayzor wrote: > So is there any way possible to turn off advertising of TLS on port or turn > it off/on per IP? > > Something like: If those work, then yes. If they don't, then no. I'd think they would work. > ssl = yes > ssl_cert = ssl_key = > local 10.1.1.1

[Dovecot] Selective TLS per local IP

2012-07-16 Thread Robert Blayzor
We have the requirement to provide SSL on some IP addresses, but not others on our servers. Providing SSL is the easy part and we're able to use multiple SSL certificates now. (thanks Timo!) All is working ok, but we several IP hosts that do not require SSL and do not have valid certificates.