[Dovecot] SSL Certificates and multiple domain names

[Marcus Rueckert]

On 2004-07-15 00:11:36 +0300, Timo Sirainen wrote:
> >Am Mittwoch, 14. Juli 2004 20:34 schrieb Daniel L. Miller:
> >>How can I have Dovecot either return a different certificate for each
> >>domain/hostname or a certificate that supports multiple names?  I
> >
> >Not at all, AFAIK, but that's a limitation of SSL / X.509 certificates 
> >and
> >none of Dovecot.
> 
> Dovecot could support different certificates based on local or remote 
> IPs. ssl_cert_file and ssl_key_file could contain %l and %r variables. 
> That would require some changes though. Currently login process 
> initializes SSL and chroots itself then. Per-IP certificates would 
> require dropping privileges only after connection has been accepted, so 
> right certificate files could be opened.
> 
> I don't think it's worth the trouble. At least not yet.

how about binding dovecot to the specific ip and use a different cert
foreach dovecot instance.

btw: will there kind of ip based vhosting within a single dovecot
instance?

darix

-- 
irssi - the client of the smart and beautiful people

              http://www.irssi.de/