Koozali.org: home of the SME Server

Wrong permissions on /var/service/ssl-popd/ssl/pop3s.pem ???

Michelle

Wrong permissions on /var/service/ssl-popd/ssl/pop3s.pem ???
« on: April 03, 2004, 12:07:04 AM »
I managed to install a 30-days trial SSL certificate from instantssl.com based on instructions by Shelby L Moore, shelbym@v-cut.com (http://www.chaloner.ca/article.php?story=20020922181652718).
---- from the Shelby's SSL howto for E-Smith 5.x ----
If like me you connect to your server using ssl to check your e-mails then you may need to do the following:

mv /usr/share/ssl/certs/imapd.pem /usr/share/ssl/certs/imapd.pem.old
mv /usr/share/ssl/certs/ipop3d.pem /usr/share/ssl/certs/ipop3d.pem.old
cat /home/e-smith/ssl.key/secure.v-cut.com.key > /usr/share/ssl/certs/imapd.pem
cat /home/e-smith/ssl.crt/secure.v-cut.com.crt >> /usr/share/ssl/certs/imapd.pem
cp /usr/share/ssl/certs/imapd.pem /usr/share/ssl/certs/ipop3d.pem
-----------------------------------------------------

Now the log files for ssl-popd/current and ssl-imapd/current are showing the following errors...
------------------------------------------------------
Using 'pop3s' as tcpwrapper service name
Wrong permissions on /var/service/ssl-popd/ssl/pop3s.pem
Using 'imaps' as tcpwrapper service name
Wrong permissions on imapsd.pem
------------------------------------------------------

My current file permission pop3s.pem and imapsd.pem
-rw-r--r--    1 root     root         2835 Apr  2 12:17 pop3s.pem
-rw-r--r--    1 root     root         2835 Apr  2 12:16 imapsd.pem

How do I set the correct permission for these files to get ssl for pop3s/imapsd working???  BTW, I am using E-Smith v6.0.1
Please help...

Thanks in advance,
Michelle

Vincent

Wrong permissions on /var/service/ssl-popd/ssl/pop3s.pem ???
« Reply #1 on: April 03, 2004, 12:18:22 AM »
---- from the Shelby's SSL howto for E-Smith 5.x ----
If like me you connect to your server using ssl to check your e-mails then you may need to do the following:

mv /usr/share/ssl/certs/imapd.pem /usr/share/ssl/certs/imapd.pem.old
mv /usr/share/ssl/certs/ipop3d.pem /usr/share/ssl/certs/ipop3d.pem.old
cat /home/e-smith/ssl.key/secure.v-cut.com.key > /usr/share/ssl/certs/imapd.pem
cat /home/e-smith/ssl.crt/secure.v-cut.com.crt >> /usr/share/ssl/certs/imapd.pem
cp /usr/share/ssl/certs/imapd.pem /usr/share/ssl/certs/ipop3d.pem
-----------------------------------------------------

I have no problems using the above instructions for E-Smith v5.6.  It seems like the paths for the certificates have changed in v6.0.x.  Maybe someone would be so kind to write up a new SSL howto for SME v6.0.x.

Regards,
Vincent