Intermediate SSL certificates in UW-imapd
Andrew Daviel <[email protected]> Thu, 26 Sep 2013 16:42:36 -0700 (PDT)
| Newsgroups | gmane.mail.imap.uw.c-client |
|---|---|
| Message-ID | <[email protected]> |
We have had UW imapd-2007e running fine for some time. Recently our SSL certificate provider announced that we had to upgrade our 1024-bit certificate to 2048 before it was revoked. The replacement they provided is not signed by a CA in the Mozilla store (and hence OpenSSL which copies it) - it uses an intermediate certificate. I got Apache to work by following instructions and defining SSLCertificateChainFile OpenLdap seems happy with the intermediate certificate added to the bundle defined as TLSCACertificateFile. But imapd does not. It uses a PEM file with both the key and certificate, and the OpenSSL library. OpenSSL (at least, the "openssl" shell command), uses the bundle in /etc/pki/tls/cert.pem. But Alpine, at least, is unhappy if I just add the intermediate certificate to that. Is there a solution ? Or should we just order a "proper" directly-signed certificate ? uw-imap-2007e openssl-0.9.8e-20 CentOS 5.7 Linux 2.6.18 x86_64