Koozali.org: home of the SME Server

Connecting to Secure POP3 on SME using stunnel

hollymcr

Connecting to Secure POP3 on SME using stunnel
« on: April 25, 2007, 01:34:57 PM »
I have an SME7 server set up with SSLPOP3 enabled.

I'm trying to connect to it using a legacy POP3 Windows application using stunnel to handle the SSL aspect.

The following config allows me to connect to SSLPOP3 at Gmail (ie it correctly allows me to make a POP3 connection to port 11001 on localhost to read my GMail mailbox):
Code: [Select]
client = yes
[Pop3SSL]
accept = localhost:11001
connect = pop.gmail.com:995


Changing the pop.gmail.com to my SME gains me an instant disconnect, with the stunnel log showing:
Code: [Select]
2007.04.25 12:27:17 LOG5[1796:468]: Pop3SSL accepted connection from 127.0.0.1:4040
2007.04.25 12:27:17 LOG5[1796:468]: Pop3SSL connected remote server from 10.0.0.17:4041
2007.04.25 12:27:17 LOG3[1796:468]: SSL_connect: 14094417: error:14094417:SSL routines:SSL3_READ_BYTES:sslv3 alert illegal parameter
2007.04.25 12:27:17 LOG5[1796:468]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket


Any suggestions?

The biggest difference I can think of is that the SSL certificate on SME is self-signed, but I have no idea if that would generate this (or any other) error, and if so how to adapt stunnel to work correctly.

It may be that stunnel forums/lists are a better place to ask but it seems to be something peculiar to a connection to SME and hopefully someone here has already tried this and got it working.