Re: Keystore Renewal Policy?

Hi,

Thanks for sharing the article David.

I would go for letsencrypt + nginx imap proxy .

https://docs.nginx.com/nginx/admin-guide/mail-proxy/mail-proxy/

It should be very easy with Docker. I'm planning to do that in the next
two weeks and write an article about it.

Regards,

Eugen

La 12.05.2020 17:03, David Matthews a scris:
> hi Jerry
>
> Not sure how helpful this is, but I mention it just in case
>
> https://dmatthews.org/java_email.html#imaps
>
> discusses imaps with james.
>
> I use a self signed cert and TBH not sure what extra LetsEncrypt offers you over that, but I produce the key with
>
> keytool -genkey -alias james -keyalg RSA
>
> and from 
>
> https://letsencrypt.org/docs/integration-guide/
>
> "Let’s Encrypt accepts RSA keys from 2048 to 4096 bits in length"
>
> --
> David Matthews
> [email protected]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>