On 6.12.2004, at 18:41, jean-Noël Chardron wrote:
In dovecot .conf I can enable (or disable) the différent port (pop, pops, imap, imaps) and may be restrict the access to the serveur with the ip adresse. Can I configure dovecot in imaps so it permit the access if the certificate is knowing by the server? Actually, this is the process to authenticate in WU-imap on imaps : the client connect to the server through a tunnel SSL (stunnel) and only if stunnel know the certificate, then the client can connect.
It's possible, but only in 1.0-tests:
ssl_verify_client_cert = yes ssl_require_client_cert = yes
Are you already using it? I don't think most clients support it at all.
and more, Is it possible when the client (with a certificate) connect to the serveur with imaps to authenticate the user without prompting the password, so the authentication is throught the certificate ?
Not yet, but I somehow doubt many clients would work with it.