SSL is working very well for me. I used the mkcert.sh script that comes with Dovecot - although I changed
it a bit to make a certificate that lasts a year instead of one month.

Mozilla, Outlook Express, Lotus Notes - all using SSL on port 993 to communicate with Dovecot and
working fine.

It _did_ take some work to get Dovecot to compile with SSL support, but it turns out that my SSL_dev
package was not installed properly. (I had such a problem finding the header files that were needed
that I completely upgraded the whole of Linux on that machine and then installed the DEV code
from a package).
Once that was done, I could coax Dovecot into compiling with SSL.

Now it works very well. Mozilla in particular immediately asks me if I want to accept the certificate
permanently or temorarily - Outlook and Notes use IE's certificate store - for that I needed to tell
my users to surf to https://server.com:993 - and then IE would pick up the certificate and let them add it
to their trusted store.

I don't know about the Mozilla error below, I didn't get that.

Les

______________________________________
Leslie Viljoen
Africa Missions Systems Administrator
Cell: 0836186100 Work: 011 6991700
Fax: 011 7945522



Warren Togami <warren@togami.com>
Sent by: dovecot-bounces@procontrol.fi

2003-05-15 10:50 PM

       
        To:        dovecot@procontrol.fi
        cc:        
        Subject:        Re: [Dovecot] ssl still not working



On Thu, 2003-05-15 at 01:25, Farkas Levente wrote:
> hi,
> I'm just download the latest cvs and try to use imaps. in mozilla I've
> got the following message window:
> -----------------------------
> mail.int.bppiac.hu received a message with incorrect Message
> Authentication Code. If the error occurs frequently, contact the website
> administrator.
> -----------------------------
> and there is only one OK button:-)
> and this happens always. what can be the reason and what can I do?
> thanks.

I can say that I too have never been able to get IMAPS working with
dovecot, with both self-signed generated .pem files and my apache SSL
keys.  I have that same error message with Mozilla Mail 1.2.1 and 1.4b.

Warren