Panda IMAP / SNI patch?
"Erik Kangas, Ph.D." <[email protected]> Thu, 20 Aug 2015 14:02:17 +0000
| Newsgroups | gmane.mail.imap.uw.c-client |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
If you cannot view the attachment(s), then your email client does not
support MIME.
--------------------_Boundary_32395623.1680378
Content-Type: multipart/alternative; boundary="-------------2264893.65100567"
---------------2264893.65100567
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Hi Folks,
I am familiar with how imapd / ipop3d are set up for TLS ... by making=20
symlinks from files such as
imapd-IPv4.pem -> the_certificate.pem
This works and has always worked fine. I wonder if anyone has patched=20
Panda or uw imap to support SNI (server name indication)? E.g. some=20
way that the server can look an an expected host header and use tha to=20
pick the PEM file. I could imagine it could be something simple like:
1. Get the the desired host name from the TLS dialog
2. Instead of looking at imapd-IPv4.pem, look at hostname.pem (assuming=20
its the same hostname for imapd, simapd, ipop3d, and sipop3d ... which=20
it would be in 99.9% of cases, I imagine).
Thanks,
-Erik Kangas
[1]LuxSci Erik Kangas, PhD
President/CEO
[2][email protected] 617-596-9558
be Smart. be Secure.
[3]www.LuxSci.com Follow LuxSci: [4]Follow LuxSci on=20
Twitter [5]Follow LuxSci on Facebook [6][IMG]
References
Visible links
1. https://luxsci.com/
2. mailto:[email protected]
3. http://www.luxsci.com/
4. http://www.twitter.com/LuxSci
5. http://www.facebook.com/pages/Westwood-MA/LuxSci/25893114249
6. http://feeds2.feedburner.com/LuxsciFyi
---------------2264893.65100567
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML>
<HTML>
<HEAD><meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF=
-8"></HEAD>
<BODY style=3D"padding:5px; line-height: 1.3em; font-size: 14px; color: #33=
3; background-color: #FFF; font-family: Arial, Helvetica, sans-serif">
<div>Hi Folks,<br />
<br />
I am familiar with how imapd / ipop3d are set up for TLS ... by making syml=
inks from files such as<br />
<br />
imapd-IPv4.pem -> the_certificate.pem<br />
<br />
This works and has always worked fine. I wonder if anyone has patched=
Panda or uw imap to support SNI (server name indication)? E.g. some =
way that the server can look an an expected host header and use tha to pick=
the PEM file. I could imagine it could be something simple like:<br =
/>
<br />
1. Get the the desired host name from the TLS dialog<br />
2. Instead of looking at imapd-IPv4.pem, look at hostname.pem (assuming its=
the same hostname for imapd, simapd, ipop3d, and sipop3d ... which it woul=
d be in 99.9% of cases, I imagine).<br />
<br />
Thanks,<br />
-Erik Kangas<br />
</div>
<div id=3D"signature"><!--SIG-->
<div style=3D"width:500px; padding:5px; border: 1px solid #CCC; border-radi=
us: 5px; background-color: #EEEEEE">
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-rad=
ius:5px; background-color: #FFFFFF; padding: 5px; width:100%">
<tbody>
<tr valign=3D"top">
<td style=3D""><a href=3D"https://luxsci.com" target=3D"_blank"><img alt=
=3D"LuxSci" border=3D"0" height=3D"128" src=3D"https://djrufvackyewl.cloudf=
ront.net/s3/logo/Logo_final_128_dark.png" width=3D"128" /></a></td>
<td width=3D"100%">
<div style=3D"margin: 5px 0 5px 0"><b><span style=3D"color:#35638d;font-=
family:arial,helvetica,sans-serif; font-size: 18px">Erik Kangas, PhD </span=
></b></div>
<div style=3D"margin-bottom: 5px"><span style=3D"color:#35638d;font-fami=
ly:arial,helvetica,sans-serif;font-size: 14px"><strong>President/CEO </stro=
ng></span></div>
<div style=3D"margin-bottom: 25px"><span style=3D"color:#646464;font-fam=
ily:arial,helvetica,sans-serif;font-size: 14px"><a href=3D"mailto:kangas@lu=
xsci.com" style=3D"color:#646464; text-decoration: none">[email protected]<=
/a> 617-596-9558</span></div>
<div style=3D"margin-bottom: 5px"><span style=3D"color:#646464;font-fami=
ly:arial,helvetica,sans-serif; font-size: 14px"><strong>be Smart. be Secure=
.</strong></span></div>
<div><a href=3D"http://www.luxsci.com" style=3D"font-family:arial,helvet=
ica,sans-serif;font-size: 14px;color: #646464" target=3D"_blank">www.LuxSci=
.com</a> <span style=3D"color:#646464;font-family:=
arial,helvetica,sans-serif;font-size: 14px">Follow LuxSci: <a href=3D"=
http://www.twitter.com/LuxSci" target=3D"_blank"><img alt=3D"Follow LuxSci =
on Twitter" height=3D"24" src=3D"https://d4hm2u4pioc0c.cloudfront.net/icons=
/custom/24x24/plain/Twitter-icon.png" style=3D"vertical-align:middle;border=
:0" width=3D"24" /></a> <a href=3D"http://www.facebook.com/pages/Westwood-M=
A/LuxSci/25893114249" target=3D"_blank"><img alt=3D"Follow LuxSci on Facebo=
ok" height=3D"24/" src=3D"https://d4hm2u4pioc0c.cloudfront.net/icons/custom=
/24x24/plain/FaceBook-icon.png" style=3D"vertical-align:middle;border:0" wi=
dth=3D"24" /></a> <a href=3D"http://feeds2.feedburner.com/LuxsciFyi" rel=3D=
"alternate" target=3D"_blank" title=3D"Subscribe to our RSS feed" type=3D"a=
pplication/rss+xml"><img alt=3D"" height=3D"24/" src=3D"https://d4hm2u4pioc=
0c.cloudfront.net/icons/custom/24x24/plain/feed.png" style=3D"vertical-alig=
n:middle;border:0" width=3D"24" /></a></span></div>
</td>
</tr>
</tbody>
</table>
</div>
<!--/SIG--></div>
</BODY>
</HTML>
---------------2264893.65100567--
--------------------_Boundary_32395623.1680378
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Imap-uw mailing list
[email protected]
http://mailman13.u.washington.edu/mailman/listinfo/imap-uw
--------------------_Boundary_32395623.1680378--