Read-only archive of the All About Symbian forum (2001–2013) · About this archive

MAIL: N70 / TLS (IMAP/SMTP) W/Self Signed Certificate

0 replies · 15,817 views · Started 05 April 2006

I bought a N70 yesterday & was trying to setup my linux mail system to permit this little fellow to connect via IMAP & SMTP with TLS security and a self signing certificate. So far so good.

:icon2: Setup:
- Qmail 1.03
- Qmail-ldap 20060201
- Qmail-ldap-control 20060403b
- Courier Authlib 0.58
- Courier-Imap 4.1.0
- OpenLdap 2.3.20
- Berkeley DB 4.4
- OpenSSL 0.9.7d
- Apache 1.x
- Qmail-Scanner/SpamAssassin/ClamAv etc..

:icon2: Howto:
Setup you qmail and your courier-imap
(http://www.qmail-ldap.org/wiki/Main_Page)
- Use authdaemond (do not try to use auth_imap) authldaprc
- make a self signed certificate with courier (see Manual)
- make a self signed certificate with qmail-ldap (see Manual)
use your hostname (FQDN) as common name for this certificate, the same you will use to connect to IMAP/SMTP
- replace imapd.pem from courier-imap with cert.pem from qmail-ldap
- use SMTPAUTH="TLSREQUIRED" for SMTP AUTH

:icon2: Import Certificate to your N70
- export your cert.pem to a DER certificate :
>openssl x509 -in cert.pem -inform PEM -out cert.cer -outform DER
- Add "application/x-x509-ca-cert cer" to your apache mime.types
- put your cert.cer in your documentroot
- use N70 internal web browser to access your cert.cer
- save this certificate with 'internet' security
- delete the cert.cer from your document root !

:icon2: Create your mailbox on N70
- Set your hostname/login/passwd
- Set security with ports 143/110 (We want TLS not SSL)

:icon4: Troubleshooting
- Try 'telnet yourhostname 25' followed by a 'EHLO TITI', qmail-smtpd must
advertise '250-STARTTLS' and '250-AUTH LOGIN PLAIN'
- Try 'telnet yourhostname 143', courier-imap must advertise STARTTLS capability
- Use ethereal ...

Good mail experience without dubious certificate warning...

PS: EPOC Email 2.10 (N70 mail client)... is... hum... somewhat limited...

Fabrice Gatille.