Re: How to get TLS working
| Newsgroups | gmane.comp.jakarta.james.user |
|---|---|
| Message-ID | <[email protected]> |
I did open https://github.com/apache/james-project/pull/804 to quickly fix it... On 21/12/2021 08:26, [email protected] wrote: > On 21/12/2021 07:22, Sir Dotcom wrote: >> I've spent the last several days trying to enable TLS on the James >> server app and the imap and smtp servers. Being a java noob, I'm >> taking the conf file text as absolute and getting nowhere. It says in >> 5 of those server conf's I believe: >> >> <!-- Set to true to support STARTTLS or TLS for the Socket. >> To use this you need to copy sunjce_provider.jar to >> /path/james/lib directory. > This is likely outdated, IMO we can get rid of it. > > Just changing this configuration will perfectly do the job. > > Regards, > > Benoit >> --> >> <tls socketTLS="false" startTLS="true"> >> <!-- To create a new keystore execute: >> keytool -genkey -alias james -keyalg RSA -keystore >> /path/to/james/conf/keystore >> --> >> >> Generating the keystore was simple, but getting a hold of this >> mysterious file sunjce_provider.jar is proving impossible. At least >> it's not on the hard drive of any of the 5 OSs and versions I've tried >> James on. I browsed Bouncy Castle's website and now I'm just dazed. >> Is it true that the sunjce file exists and is still used or is >> something else replacing it? Every attempt to nail this down has been >> a dead end. I can't find anything in the docs about it. Am I missing >> something obvious here? >> >> Regards, >> >> Steve >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >