Re: Weird SSL error

At 12:16 AM -0700 9/9/08, Doug Hardie wrote:

>  On Sep 8, 2008, at 16:38, The Doctor wrote:
>
>>  On Mon, Sep 08, 2008 at 06:20:13PM -0500, Butch Kemper wrote:
>>>
>>>  The error message tell you that the line 3 of the config file contains an
>>>  error.
>>>
>>>  So what does the config file look like?
>>>
>>>  /etc/mail/pop/qpopper.config
>>  --
>>
>>
>>  set tls-support = alternate-port
>>  set tls-options = 0x00000800
>>  set tls-server-cert-file = /etc/mail/pop/pop3.nk.ca.2008.crt
>>  set tls-private-key-file = /etc/mail/pop/pop3.nk.ca.2008.key
>>  set config-file = /etc/mail/pop/qpopper-tls.config
>
>  Version 4.0 and earlier have an issue with spaces and quotes around 
> file names.  I no longer remember the specifics on which work and 
> which do not (It appears to be corrected in 4.1).  Remove the 
> spaces around the file names first and if that doesn't solve it, 
> add double quotes around the file name.

Hi Doug,

This is good advice.

To "The Doctor": please try what Doug suggests and let us know if you 
still have a problem.  Or, upgrade to Qpopper 4.1, which fixed the 
problem.

>   Also, I don't find any reference to the tls-options entry in the 
> qpopper admin guide.  Are you sure thats a valid config command?

It's in the /current/ Admin Guide, but hasn't made it to the 4.1 
branch yet, sorry about that.  It's also the samples/qpopper.config 
file for all three branches:

# This option allows various OpenSSL options to be set.  OpenSSL
# options are individual bits that control various work-arounds.
#
# The bit values are listed in openssl/ssl.h, and start with SSL_OP_.
# You must specify the actual value of the bit(s) you want to set,
# not the OpenSSL mnemonic.
#
# For example, to set SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS, set
# tls-options to 0x00000800.
#
# Note that unlike other options, if you set this option more than
# once, the values are added together.  For example, if you set
# tls-options to 0x01, and then later set it to 0x10, it gets set to
# 0x11.  This makes is somewhat more convenient to set various SSL
# options without having to manually add them together.
#
# Only valid if '--with-openssl' used with ./configure
#
# Default: 0
#
# set tls-options              = 0

-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
History is strewn thick with evidence that truth is not hard to kill,
but a lie, well told, is immortal.
--Mark Twain