Re: Require certificate for external clients

2015-03-01 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 27 Feb 2015, Karol Babioch wrote: I'm currently looking into ways of making use of client certificates. I want to force external clients (i.e. anything outside the local subnet) to use client certificates. It is my understanding that this in

Re: Require certificate for external clients

2015-03-01 Thread Joseph Tam
Karol Babioch writes: You can share libraries, binaries, log files, but use separate configuration files, specifying different ports/addresses/ssl-configs/auth/access parameters. Then you can fire them both up dovecot -c /dovecot/etc/dovecot-1.conf dovecot -c /dovecot/etc/dovecot-2.co

Re: Require certificate for external clients

2015-03-01 Thread Karol Babioch
Hi, Am 28.02.2015 um 00:28 schrieb Joseph Tam: > That should be qualified as "Is it possible to have Dovecot imap/pop > daemons listening on multiple ports for a single running instance." Yes, exactly. > You can share libraries, binaries, > log files, but use separate configuration files, specif

Re: Require certificate for external clients

2015-02-27 Thread Joseph Tam
Karol Babioch writes: As far as I know dovecot is not able to operate on multiple ports, as stated in the FAQ [1]. > [1]: > http://wiki.dovecot.org/QuestionsAndAnswers#Is_it_possible_to_have_Dovecot_imap.2BAC8-pop_daemons_listening_on_multiple_ports.3F That should be qualified as "Is it poss

Re: Require certificate for external clients

2015-02-27 Thread Rick Romero
Quoting Karol Babioch : Hi list, I'm currently looking into ways of making use of client certificates. I want to force external clients (i.e. anything outside the local subnet) to use client certificates. It is my understanding that this in itself can be achieved with the "ssl_require_client_ce

Require certificate for external clients

2015-02-27 Thread Karol Babioch
Hi list, I'm currently looking into ways of making use of client certificates. I want to force external clients (i.e. anything outside the local subnet) to use client certificates. It is my understanding that this in itself can be achieved with the "ssl_require_client_cert" setting. However, I al