[ LUGOS ] sslwrap

[Borut Mrak]

On Thu, Nov 23, 2000 at 11:02:16AM +0100, Andraz Hvalica wrote:
> V bistvu samo podoben, ker za del procedure ne morem vedeti, ker se pri
> namestitvi sslwrapa na debianu se automagically certifikat naredi. Vsekakor
> se pa ujema vrstica v inetd.conf.

Poglej v /var/lib/dpkg/info/sslwrap.postinst...tisto je skript, ki se zazene
po instalaciji paketa...

On Thu, Nov 23, 2000 at 11:38:55AM +0100, David Klasinc wrote:
> openssl uporabljas za connect na IMAP SSL?
> 
> Probaj raje ze netscape-om... Ali cem drugim sposobnim SSL imapa.
> 
> Tale openssl s_client mi ne zveni pravilno... Ceprav mogoce bi moralo... :)

openssl je majka za preizkusat povezave:

bofh na falbala:/tmp$ openssl s_client -host porkamadona -port 995
CONNECTED(00000003)
depth=0 /C=SI/ST=Slovenija/L=Ljubljana/O=Internet Widgits Pty Ltd/OU=bolaric/CN=porkamadona/Email=root na porkamadona
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=SI/ST=Slovenija/L=Ljubljana/O=Internet Widgits Pty Ltd/OU=bolaric/CN=porkamadona/Email=root na porkamadona
verify error:num=10:Certificate has expired
notAfter=Nov 21 03:52:27 2000 GMT
verify return:1
depth=0 /C=SI/ST=Slovenija/L=Ljubljana/O=Internet Widgits Pty Ltd/OU=bolaric/CN=porkamadona/Email=root na porkamadona
notAfter=Nov 21 03:52:27 2000 GMT
verify return:1
[certifikat]
SSL handshake has read 1389 bytes and written 235 bytes
---
New, TLSv1/SSLv3, Cipher is EDH-RSA-DES-CBC3-SHA
Server public key is 1024 bit
SSL-Session:
    Protocol  : TLSv1
    Cipher    : EDH-RSA-DES-CBC3-SHA
    Session-ID: 4EA4D0CCCD05F4B0DB114221EB30BA49B92D590817CACE9363164CCD32B28802
Session-ID-ctx:
    Master-Key: BD29A0A8E7634B74DF6CAC4376B244FBA9A16D32A441C9723DA4718C0113032A8F5212671CF6E4938C0034B1274CDF8A
    Key-Arg   : None
    Start Time: 974979414
    Timeout   : 300 (sec)
---
+OK POP3 localhost v7.64 server ready

lp,
Borut.