Fetchmail with SSL - Revision history

Yohanan: /* Configure Fetchmail */

Yohanan — Tue, 27 Apr 2010 01:06:25 GMT

Configure Fetchmail

←Older revision		Revision as of 01:06, 27 April 2010
Line 90:		Line 90:

	<pre>		<pre>
-	$ openssl x509 -in antiflux.org.pem -noout -md5 -fingerprint	+	$ openssl x509 -in /home/yohanan/.certs/antiflux.org.pem -noout -md5 -fingerprint
	</pre>		</pre>

Yohanan: /* Configure Fetchmail */

Yohanan — Tue, 27 Apr 2010 01:04:34 GMT

Configure Fetchmail

←Older revision		Revision as of 01:04, 27 April 2010
Line 103:		Line 103:
	<pre>		<pre>
	ssl sslcertck sslfingerprint 'A1:B2:C3:D4:E5:F6:G7:H8:I9:J0:K1:L2:M3:N4:O5:P6'		ssl sslcertck sslfingerprint 'A1:B2:C3:D4:E5:F6:G7:H8:I9:J0:K1:L2:M3:N4:O5:P6'
-	sslcertpath /home/~~foobar~~/.certs	+	sslcertpath /home/yohanan/.certs
	</pre>		</pre>

Yohanan: /* Configure Fetchmail */

Yohanan — Tue, 27 Apr 2010 01:04:13 GMT

Configure Fetchmail

←Older revision		Revision as of 01:04, 27 April 2010
Line 90:		Line 90:

	<pre>		<pre>
-	$ openssl x509 -in ~~mail.~~antiflux.org.pem -noout -md5 -fingerprint	+	$ openssl x509 -in antiflux.org.pem -noout -md5 -fingerprint
	</pre>		</pre>

Yohanan: /* Configure Fetchmail */

Yohanan — Wed, 13 Sep 2006 06:39:45 GMT

Configure Fetchmail

←Older revision		Revision as of 06:39, 13 September 2006
Line 102:		Line 102:

	<pre>		<pre>
-	ssl sslcertck sslfingerprint 'A1:B2:C3:D4:E5:F6:G7:H8:I9:J0:K1:L2:M3:N4:O5:P6' sslcertpath /home/foobar/.certs	+	ssl sslcertck sslfingerprint 'A1:B2:C3:D4:E5:F6:G7:H8:I9:J0:K1:L2:M3:N4:O5:P6'
		+	sslcertpath /home/foobar/.certs
	</pre>		</pre>
-

	=== Run Fetchmail to Test ===		=== Run Fetchmail to Test ===

Yohanan: /* The Steps */

Yohanan — Wed, 13 Sep 2006 06:39:05 GMT

The Steps

←Older revision		Revision as of 06:39, 13 September 2006
Line 23:		Line 23:
	== The Steps ==		== The Steps ==

-	~~All~~ of the steps below ~~use~~ my home directory (/home/yohanan). You should obviously change this to your home directory ~~on your local machine~~.	+	Firstly, note that all of these commands take place on your local machine, not on antiflux. Also, all of the steps below specify my home directory (/home/yohanan) on my local machine. You should obviously change this to your home directory.

	=== Create a Local Repository for the Certificates ===		=== Create a Local Repository for the Certificates ===

Yohanan: /* Run ''c_rehash'' on the Certificates Directory */

Yohanan — Wed, 13 Sep 2006 06:36:48 GMT

Run ''c_rehash'' on the Certificates Directory

←Older revision		Revision as of 06:36, 13 September 2006
Line 75:		Line 75:
	</pre>		</pre>

-	~~'''Step 5:'''~~ Recheck ~~your work~~	+	=== Recheck Your Work ===

	Re-run the following command:		Re-run the following command:

	<pre>		<pre>
-	openssl s_client -CApath /home/~~foobar~~/.certs -connect ~~pop~~.~~foobar~~.~~com~~:~~995~~ -showcerts	+	openssl s_client -CApath /home/yohanan/.certs -connect mail.antiflux.org:993 -showcerts
	</pre>		</pre>

Yohanan: /* Get the Root Certificate */

Yohanan — Wed, 13 Sep 2006 06:35:47 GMT

Get the Root Certificate

←Older revision		Revision as of 06:35, 13 September 2006
Line 51:		Line 51:
	=== Get the Root Certificate ===		=== Get the Root Certificate ===

-	You need to download [[http://antiflux.org/ca/antiflux.org-root.crt]] but this can be an issue using a browser since there is a good chance your browser will try to install it (for its mail client). Instead you need to do a "Save link as..." from the browser to save it. Put it in the /home/yohanan/.certs directory and change the extension from ''crt'' to ''pem''.	+	You need to download [http://antiflux.org/ca/antiflux.org-root.crt http://antiflux.org/ca/antiflux.org-root.crt] but this can be an issue using a browser since there is a good chance your browser will try to install it (for its mail client). Instead you need to do a "Save link as..." from the browser to save it. Put it in the /home/yohanan/.certs directory and change the extension from ''crt'' to ''pem''.

	I use '''wget''' from the command-line to get around using the browser to download the certificate.		I use '''wget''' from the command-line to get around using the browser to download the certificate.

Yohanan: /* Run ''c_rehash'' on the Certificates Directory */

Yohanan — Wed, 13 Sep 2006 06:34:36 GMT

Run ''c_rehash'' on the Certificates Directory

←Older revision		Revision as of 06:34, 13 September 2006
Line 64:		Line 64:

	<pre>		<pre>
-	$ c_rehash /home/~~foobar~~/.certs	+	$ c_rehash /home/yohanan/.certs
	</pre>		</pre>

Line 84:		Line 84:

	Scroll to the top of the output and look for a ''depth=1''. This implies that the certificates are now in working order.		Scroll to the top of the output and look for a ''depth=1''. This implies that the certificates are now in working order.
-

	=== Configure Fetchmail ===		=== Configure Fetchmail ===

Yohanan: /* Get the Mail Server Certificate */

Yohanan — Wed, 13 Sep 2006 06:34:17 GMT

Get the Mail Server Certificate

←Older revision		Revision as of 06:34, 13 September 2006
Line 47:		Line 47:
	</pre>		</pre>

-	Save them in a file in /home/yohanan/.certs. The file must end in a ''pem'' extension. For example, you could name the file ~~imap.~~antiflux.org.pem.	+	Save them in a file in /home/yohanan/.certs. The file must end in a ''pem'' extension. For example, you could name the file antiflux.org.pem.

	=== Get the Root Certificate ===		=== Get the Root Certificate ===

Yohanan: /* The Steps */

Yohanan — Wed, 13 Sep 2006 06:32:35 GMT

The Steps

←Older revision		Revision as of 06:32, 13 September 2006
Line 23:		Line 23:
	== The Steps ==		== The Steps ==

-	~~'''Step 1:'''~~ Create a ~~local repository~~ for the ~~certificates~~	+	All of the steps below use my home directory (/home/yohanan). You should obviously change this to your home directory on your local machine.
		+
		+	=== Create a Local Repository for the Certificates ===

	<pre>		<pre>
Line 29:		Line 31:
	</pre>		</pre>

-	~~'''Step 2:'''~~ Get the ~~mail server certificate~~	+	=== Get the Mail Server Certificate ===

	<pre>		<pre>
Line 47:		Line 49:
	Save them in a file in /home/yohanan/.certs. The file must end in a ''pem'' extension. For example, you could name the file imap.antiflux.org.pem.		Save them in a file in /home/yohanan/.certs. The file must end in a ''pem'' extension. For example, you could name the file imap.antiflux.org.pem.

-	~~'''Step 3:'''~~ Get the ~~root certificate~~	+	=== Get the Root Certificate ===

	You need to download [[http://antiflux.org/ca/antiflux.org-root.crt]] but this can be an issue using a browser since there is a good chance your browser will try to install it (for its mail client). Instead you need to do a "Save link as..." from the browser to save it. Put it in the /home/yohanan/.certs directory and change the extension from ''crt'' to ''pem''.		You need to download [[http://antiflux.org/ca/antiflux.org-root.crt]] but this can be an issue using a browser since there is a good chance your browser will try to install it (for its mail client). Instead you need to do a "Save link as..." from the browser to save it. Put it in the /home/yohanan/.certs directory and change the extension from ''crt'' to ''pem''.
Line 59:		Line 61:
	</pre>		</pre>

-	'''~~Step 4:~~'~~'' Run c_rehash~~ on the ~~certificates directory~~	+	=== Run ''c_rehash'' on the Certificates Directory ===

	<pre>		<pre>
Line 84:		Line 86:


-	~~'''Step 6:'''~~ Configure ~~fetchmail~~	+	=== Configure Fetchmail ===

	First, get the fingerprint for the mailserver by using the following command:		First, get the fingerprint for the mailserver by using the following command:
Line 95:		Line 97:

	<pre>		<pre>
-	MD5 Fingerprint=A1:B2:C3:D4:E5:F6:G7:H8:I9:J0:K1:L2:M3:N4:O5:P6	+	MD5 Fingerprint=E8:9C:9E:43:89:15:4E:C8:6C:BA:5C:05:5B:F3:95:C7
	</pre>		</pre>

Line 105:		Line 107:


-	~~''Step 7:''~~ Run ~~fetchmail~~ to ~~test~~	+	=== Run Fetchmail to Test ===

	<pre>		<pre>