Re: ot: iphone setup for smtp-auth self certified

2010-11-09 Thread Voytek Eymont
On Tue, November 9, 2010 11:35 am, Larry Stone wrote: > On 11/8/10 5:07 PM, Voytek Eymont at li...@sbt.net.au wrote: > There are plenty of instructions out there; try searching for "iphone > install certificate". But in short, e-mail the certificate to your iphone > and then double-"click" it jus

Re: ot: iphone setup for smtp-auth self certified

2010-11-09 Thread Victor Duchovni
On Tue, Nov 09, 2010 at 06:39:15AM -0600, Larry Stone wrote: > > NO, NO, NO! > > > > A pkcs12 file carries both the private key and the certificate, in > > this case the phone needs only a public certificate to add to its trust > > chain. It MUST NOT have access to the server's private key. > >

Re: ot: iphone setup for smtp-auth self certified

2010-11-09 Thread Larry Stone
On 11/8/10 8:45 PM, Victor Duchovni at victor.ducho...@morganstanley.com wrote: > On Mon, Nov 08, 2010 at 07:32:25PM -0600, Vernon A. Fort wrote: > >> On Tue, 2010-11-09 at 11:53 +1100, Voytek Eymont wrote: >>> On Tue, November 9, 2010 11:35 am, Larry Stone wrote: >>> There are plenty of in

Re: ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Victor Duchovni
On Mon, Nov 08, 2010 at 07:32:25PM -0600, Vernon A. Fort wrote: > On Tue, 2010-11-09 at 11:53 +1100, Voytek Eymont wrote: > > On Tue, November 9, 2010 11:35 am, Larry Stone wrote: > > > > > There are plenty of instructions out there; try searching for "iphone > > > install certificate". But in sh

Re: ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Vernon A. Fort
On Tue, 2010-11-09 at 11:53 +1100, Voytek Eymont wrote: > On Tue, November 9, 2010 11:35 am, Larry Stone wrote: > > > There are plenty of instructions out there; try searching for "iphone > > install certificate". But in short, e-mail the certificate to your iphone > > and then double-"click" it j

Re: ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Victor Duchovni
On Tue, Nov 09, 2010 at 11:53:17AM +1100, Voytek Eymont wrote: > do I simply send the '/etc/postfix/tls/smtpd.crt' file 'as is', > is that the one ? Yes, that is key. > > # grep tls main.cf > ... > smtpd_tls_key_file = /etc/postfix/tls/smtpd.key > smtpd_tls_cert_file = /etc/postfix/tls/smtpd.cr

Re: ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Voytek Eymont
On Tue, November 9, 2010 11:35 am, Larry Stone wrote: > There are plenty of instructions out there; try searching for "iphone > install certificate". But in short, e-mail the certificate to your iphone > and then double-"click" it just like opening any other attachment. The > iPhone will then ope

Re: ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Larry Stone
On 11/8/10 5:07 PM, Voytek Eymont at li...@sbt.net.au wrote: > I was asked 'how to setup iphone with our postix smtp-auth self-issued > certificate server' > > does anyone have any instructions for iphone that they would share ? There are plenty of instructions out there; try searching for "ipho

ot: iphone setup for smtp-auth self certified

2010-11-08 Thread Voytek Eymont
I was asked 'how to setup iphone with our postix smtp-auth self-issued certificate server' does anyone have any instructions for iphone that they would share ? I don't have an iphone to explore, I borrowed an iphone, tried it myself, it appears to be self-configuring, as after 2 or three tries, I