[Dovecot] SSL Client Certificate Support

Bert Koelewijn bert at rosanneke.com
Mon Oct 6 22:14:03 EEST 2003


Timo Sirainen wrote:
> Personally I'd really like to get the current CVS code fully working as
> intended. Then there's some long standing bugs/features (eg. recent
> counters). Then some NFS safety problems. All those should have been
> fixed long ago.
yes, it's better to get dovecot stable first.

> Also currently there's only dovecot-auth and master processes in Dovecot
> which have to be free of security holes to avoid pre-login security
> holes. That's not a lot of code. Using OpenSSL for authentication brings
> in tons of more code that has to be relied on.

I understand. But please, keep it in mind for later versions of dovecot!





More information about the dovecot mailing list