Re: What certificate uses "httpd -s"?

To clarify Marco's comment, "Be aware that it is possible to use 
different certs for the protocols."  To do this one prefixes the 
tls_command directive with the "servicename" as used in cyrus.conf.

For example, is one defines these services in /etc/cyrus.conf:

        imap            cmd="imapd -U 30" listen="imap" prefork=0 maxchild=100
        imaps           cmd="imapd -s -U 30" listen="imaps" prefork=0 maxchild=100
        http            cmd="httpd -U 30" listen="8008" prefork=0 maxchild=100
        https           cmd="httpd -s -U 30" listen="8443" prefork=0 maxchild=100

One might then define different TLS options in /etc/imapd.conf:

    tls_server_cert: /etc/letsencrypt/live/example.com/fullchain.pem
    tls_server_key: /etc/letsencrypt/live/example.com/privkey.pem
    https_tls_server_cert: /etc/letsencrypt/live/otherdomain.com/fullchain.pem
    https_tls_server_key: /etc/letsencrypt/live/otherdomain.com/privkey.pem

This isn't well documented, but this same service-specific configuration 
option prefix capability exists throughout imapd.conf.  See, for 
example, the mentions of ldap_tls_... option settings.

Cheers,
     -nic

On 4/28/24 09:16, Marco Moock wrote:
> Am 28.04.2024 um 02:42:54 Uhr [email protected]:
>
>> Well, may I ask, if anyone has cyrus' https running?
>> With in Debian 12?
>> With the version provided by debian?
> I have.
> It works for me.
>
> Regarding TLS, I only have those lines. Be aware that it is possible to
> use different certs for the protocols.
>
> Try a configuration like that:
>
> tls_server_cert: /etc/fullchain.pem
> tls_server_key: /etc/privkey.pem
> tls_client_ca_dir: /etc/ssl/certs
>
>

-- 
Nic [email protected]
https://www.nicbernstein.com

------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T23f946aa9915d39f-M67d0c40206dc72a9d58925a4
Delivery options: https://cyrus.topicbox.com/groups/info/subscription