[Dovecot] MySQL-SSL

[xyon]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello all,

I've been running dovecot authenticating against a local MySQL database,
but it has come time to implement it with a remote database. Instead of
using stunnel, I'd rather take advantage of MySQL's native SSL support.
I didn't know if this was possible with dovecot, and if it was, what
config changes I might need to get it going.

I found the below page/patch from some time ago and tried to use the
ssl_key and ssl_cert directives in /etc/dovecot-sql.conf, but it didn't
seem to recognize them (perhaps I need to compile mysql-ssl support into
dovecot manually?):

http://www.dovecot.org/list/dovecot-cvs/2004-July/003003.html

Also, I noticed a need for ssl_ca and ssl_ca_path but am unfamiliar with
how to generate what's needed if these options are required.

FYI, dovecot 1.0.7 is running on CentOS 4.5, using rpm from ATrpms:
http://dl.atrpms.net/el4-i386/atrpms/stable/dovecot-1.0.7-0_63.el4.i386.rpm

Thanks for any advice or documentation pointers you can provide. Have a
great evening everyone!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHL85sJ6p9X8nw/2oRAr9JAJ9u5XTOXqqUvVFE5HqEAr4HzC2juwCgob5o
7usezyZdBjP44wEYQKUg/fQ=
=tv5y
-----END PGP SIGNATURE-----