#1  
Old 29th October 2009, 08:41
sgsterling sgsterling is offline
Junior Member
 
Join Date: Oct 2009
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default IMAP Certificate Expired

A year ago I followed the How-To "Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Mandriva 2008.1)". It has worked perfect for a year ....

I'm sure you know where this is going. The default IMAP and POP3 certs that are generated with the Courier URPMI install/startup have expired, generating errors to the users.

I looked through the forum and found some references to the problem in other distro how-to's, but the pem files mentioned that need to be replaced I can't even find with locate.

I did find the scripts mkimapdcert and mkpop3cert, and updated the 365 day references and tried to rerun this scripts but received an error.

Any ideas on how to update the tls/ssl certs for courier in this Mandriva distro?
Reply With Quote
Sponsored Links
  #2  
Old 30th October 2009, 19:36
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,749 Times in 2,579 Posts
Default

Have you tried to find the files with
Code:
locate cnf
?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 31st October 2009, 02:56
sgsterling sgsterling is offline
Junior Member
 
Join Date: Oct 2009
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Yes-- did a locate cnf, I get:

locate cnf
/etc/my.cnf
/etc/pki/tls/openssl.cnf
/usr/share/doc/mysql-common/my-huge.cnf
/usr/share/doc/mysql-common/my-innodb-heavy-4G.cnf
/usr/share/doc/mysql-common/my-large.cnf
/usr/share/doc/mysql-common/my-medium.cnf
/usr/share/doc/mysql-common/my-small.cnf
/usr/share/mysql/my-huge.cnf
/usr/share/mysql/my-innodb-heavy-4G.cnf
/usr/share/mysql/my-large.cnf
/usr/share/mysql/my-medium.cnf
/usr/share/mysql/my-small.cnf
/usr/share/webmin/acl/openssl.cnf
/usr/share/webmin/blue-theme/mysql/images/cnf.gif
/usr/share/webmin/mysql/edit_cnf.cgi
/usr/share/webmin/mysql/save_cnf.cgi
/usr/share/webmin/mysql/help/cnf.ca.html
/usr/share/webmin/mysql/help/cnf.html
/usr/share/webmin/mysql/help/cnf.it.html
/usr/share/webmin/mysql/images/cnf.gif
/usr/share/webmin/openvpn/openvpn-ssl.cnf

Notice no imapd.cnf.

And if I try to run /usr/sbin/mkimapdcert I get--
error on line -1 of /etc/courier/imapd.cnf
29833:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('/etc/courier/imapd.cnf','rb')

since the expected file doesn't exist. Mandriva Courier RPM must be the problem, maybe they changed the name of the file or something.
Reply With Quote
  #4  
Old 31st October 2009, 14:38
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,749 Times in 2,579 Posts
Default

Quote:
Originally Posted by sgsterling View Post
And if I try to run /usr/sbin/mkimapdcert I get--
error on line -1 of /etc/courier/imapd.cnf
29833:error:02001002:system library:fopen:No such file or directory:bss_file.c:122:fopen('/etc/courier/imapd.cnf','rb')

since the expected file doesn't exist. Mandriva Courier RPM must be the problem, maybe they changed the name of the file or something.
I guess you need to create that file manually. Try something like this in it:


Code:
RANDFILE = /usr/lib/courier/imapd.rand

[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
prompt = no

[ req_dn ]
C=US
ST=NY
L=New York
O=Courier Mail Server
OU=Automatically-generated IMAP SSL key
CN=localhost
emailAddress=postmaster@example.com


[ cert_type ]
nsCertType = server
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Tags
certificate expire, courier, imap

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Install a Comodo InstantSSL Certificate for ISPconfig Apache, Postfix, Imap & Pop gwa7 Tips/Tricks/Mods 1 30th September 2009 19:08
Problem with Server Certificate Expired albertux Installation/Configuration 9 23rd September 2009 15:11
Is my postfix is hacked? bzzik Server Operation 21 15th July 2009 15:13
Install a Comodo InstantSSL Certificate for ISPconfig Apache, Postfix, Imap & Pop gwa7 Installation/Configuration 0 10th April 2009 05:54
Another Certificate Expired Thread Fedora 6 LAMP ghall Installation/Configuration 9 17th January 2008 20:01


All times are GMT +2. The time now is 01:46.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.